mirror of
https://github.com/dredx/prole.git
synced 2026-09-23 11:03:59 +00:00
9571f42568
Both ansible.cfg files lacked vault_password_file, causing 'Attempting to decrypt but no vault secrets found' when running any playbook that auto-loads the encrypted group_vars/all/ files. - ansible.cfg (root): vault_password_file = .vault_pass - infrastructure/ansible.cfg: vault_password_file = ../.vault_pass .vault_pass is gitignored. Each machine needs its own copy. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
28 lines
859 B
INI
28 lines
859 B
INI
[defaults]
|
|
inventory = infrastructure/inventory/hosts.ini
|
|
roles_path = infrastructure/roles
|
|
collections_paths = infrastructure/collections
|
|
interpreter_python = auto_silent
|
|
deprecation_warnings = False
|
|
vault_password_file = .vault_pass
|
|
callback_plugins = lib/ansible/plugins/callback
|
|
callbacks_enabled = run_logger
|
|
stdout_callback = default
|
|
result_format = yaml
|
|
forks = 20
|
|
timeout = 30
|
|
host_key_checking = True
|
|
|
|
[privilege_escalation]
|
|
become = True
|
|
become_method = sudo
|
|
become_ask_pass = False
|
|
|
|
[ssh_connection]
|
|
pipelining = True
|
|
|
|
# Use a repo-local known_hosts file and accept new keys non-interactively.
|
|
# This prevents unattended runs from failing when inventory uses IPs via `ansible_host`
|
|
# and the key is not yet present in the user's `~/.ssh/known_hosts`.
|
|
ssh_common_args = -o UserKnownHostsFile=.ansible/known_hosts -o StrictHostKeyChecking=accept-new
|