From 9db0b0ae847dd9f3d5057513612e0544a18104ec Mon Sep 17 00:00:00 2001 From: counterweight Date: Fri, 11 Sep 2026 17:59:41 +0200 Subject: [PATCH] now using password --- .gitignore | 11 ++++++----- ansible/ansible.cfg | 2 +- 2 files changed, 7 insertions(+), 6 deletions(-) diff --git a/.gitignore b/.gitignore index 6c0a084..750a233 100644 --- a/.gitignore +++ b/.gitignore @@ -14,8 +14,9 @@ inventory.ini venv/* .env -# Secrets and sensitive files -*_secrets.yml -*_secrets.yaml -secrets/ -.secrets/ +# Secrets are ansible-vault encrypted and ARE committed. +# Anything matching *_secrets.plain.yml is a working decryption — never commit those. +*_secrets.plain.yml + +# Vault password — never commit +ansible/.vault_pass \ No newline at end of file diff --git a/ansible/ansible.cfg b/ansible/ansible.cfg index 56620fa..aa10181 100644 --- a/ansible/ansible.cfg +++ b/ansible/ansible.cfg @@ -7,7 +7,7 @@ stdout_callback = yaml retry_files_enabled = False host_key_checking = True forks = 10 -# vault_password_file = .vault_pass # uncomment in Stage 2 +vault_password_file = .vault_pass [ssh_connection] pipelining = True