host_vars This directory serves for per-host configuration values, especially passwords. To set host-specific vars create a file with the same name as the host is called in the ``hosts`` file and in this file write the options as you would normally in the ``hosts`` file. For instance:: # file "h1.example.org" ansible_sudo_pass: my-secret-sudo-password ansible_user: foo You can (and should) encrypt these files with `ansible-vault`:: $ ansible-vault create h1.example.org and later, when running ansible you can add ``--ask-vault`` option to decrypt the config files. In that case make sure to use the same password for all vault files. This very file serves as a placeholder in case this whole repo is going to `git` somewhen.