4 ms·
In my ansible.cfg I have: vault_password_file = tools/vault.sh In my tools/vault.sh I have: echo -n $(pass infrastructure/ansible-vault) This lets me st
by mike-cardwell 5y ago
In my ansible.cfg I have:
vault_password_file = tools/vault.sh
In my tools/vault.sh I have:
echo -n $(pass infrastructure/ansible-vault)
This lets me store my ansible vault master password for managing my personal infrastructure inside pass. I like it.
- VTimofeenko 5y agoAnsible also has a collection that allows to work with pass's password store directly[1]. Have been using it with a dedicated pass repo for a while now, the PASSWORD_STORE_DIR variable can be loaded through direnv when entering directory with ansible playbooks to separate infrastructure credentials from user ones. [1]: https://docs.ansible.com/ansible/latest/collections/community/general/passwordstore_lookup.html https://docs.ansible.com/ansible/latest/collections/communit...