📚 Cheatsheet

ansible-vault encrypt_string 'mon_secret' --name 'db_password'

ansible-vault create secrets.yml

ansible-vault edit secrets.yml

- hosts: all
  vars_files:
    - secrets.yml

  tasks:
    - name: Utiliser un secret
      ansible.builtin.debug:
        msg: "Le mot de passe de l'API est {{ api_password }}"

ansible-vault rekey secrets.yml

# Lancement :
ansible-playbook playbook.yml --vault-password-file .vault_pass