host_vars This directory serves for per-host configuration values, especially passwords. To set host-specific vars create a file with the same name as the host is called in the ``hosts`` file and in this file write the options as you would normally in the ``hosts`` file. For instance:: # file "h1.example.org" --- ansible_sudo_pass: my-secret-sudo-password ansible_user: foo You can (and should) encrypt these files with `ansible-vault`:: $ ansible-vault create h1.example.org or, if the file exists already, yet unencrypted:: $ ansible-vault encrypt h1.example.com and later, when running ansible you can add ``--ask-vault-pass`` option to decrypt the config files. In that case make sure to use the same password for all vault files (or encrypt all files at once with the same password). This very file serves as a placeholder in case this whole repo is going to `git` somewhen.