mirror of
https://github.com/dredx/prole.git
synced 2026-09-23 10:13:58 +00:00
9571f42568
Both ansible.cfg files lacked vault_password_file, causing 'Attempting to decrypt but no vault secrets found' when running any playbook that auto-loads the encrypted group_vars/all/ files. - ansible.cfg (root): vault_password_file = .vault_pass - infrastructure/ansible.cfg: vault_password_file = ../.vault_pass .vault_pass is gitignored. Each machine needs its own copy. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
27 lines
836 B
INI
27 lines
836 B
INI
[defaults]
|
|
# Note: When running from the project root, the root ansible.cfg is used.
|
|
# This file is for running ansible-playbook from within the infrastructure/ directory.
|
|
inventory = inventory/hosts.ini
|
|
roles_path = roles
|
|
collections_paths = collections
|
|
interpreter_python = auto_silent
|
|
vault_password_file = ../.vault_pass
|
|
callback_plugins = ../lib/ansible/plugins/callback
|
|
callbacks_enabled = run_logger
|
|
# For Ansible < 2.13, we use community.general.yaml
|
|
# For Ansible >= 2.13, we should use result_format=yaml in ansible.builtin.default
|
|
# To maintain compatibility, we use the default callback and set result_format
|
|
stdout_callback = default
|
|
result_format = yaml
|
|
forks = 20
|
|
timeout = 30
|
|
host_key_checking = True
|
|
|
|
[privilege_escalation]
|
|
become = True
|
|
become_method = sudo
|
|
become_ask_pass = False
|
|
|
|
[ssh_connection]
|
|
pipelining = True
|