Changeset 14773 for main/waeup-ansible/host_vars

Timestamp:

4 Aug 2017, 22:54:59 (7 years ago)

Author:

uli

Message:

Tell about ansible-vault in README.

Just encrypted all sensitive ansible files on my
laptop and could ping all hosts nevertheless.

Tell, how I did it.

File:

• main/waeup-ansible/host_vars/README.txt (modified) (2 diffs)

main/waeup-ansible/host_vars/README.txt

@@ -8 +8 @@
 
     # file "h1.example.org"
+    ---
     ansible_sudo_pass: my-secret-sudo-password
     ansible_user: foo
@@ -16 +17 @@
     <edit-file, add content as above>
 
-and later, when running ansible you can add ``--ask-vault`` option to decrypt
+or, if the file exists already, yet unencrypted::
+
+    $ ansible-vault encrypt h1.example.com
+
+and later, when running ansible you can add ``--ask-vault-pass`` option to decrypt
 the config files. In that case make sure to use the same password for all vault
-files.
+files (or encrypt all files at once with the same password).
 
 This very file serves as a placeholder in case this whole repo is going to