boma/inventories/production/group_vars/all/vault.yml
sjat 4ee1b66e23 Source vault password from Vaultwarden via rbw; nest vault structure
Master vault password is fetched from Vaultwarden via the rbw agent
(scripts/vault-pass-client.sh, wired as vault_password_file) instead of a
plaintext .vault_pass. Vault secrets use a nested vault.<service>.<key> map.
Encrypted vault.yml files are excluded from lint. Includes the host rename in
Makefile and STATUS.md.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-05-30 18:16:35 +02:00

18 lines
1.4 KiB
YAML

$ANSIBLE_VAULT;1.1;AES256
62313835613730303334653334393033646661323865636534353061333765326239333835643139
6631393939363263313861656461303134383162336662380a333564343131323036343137383736
64666265653233636631373266396132623561363766326266353638643538303936613435333530
3864356133633663650a376362313861326263633036303664336439663030613438636339613765
63383431376636646236346435363035333036373466613066643761646237323133633866366230
38396333313238393630336263373063363538343865366432353138643663653638356438303738
66313832343436616634313734343433363362613437383963383263363666613431346663376263
62633162633962376537306262353736336435343339333266643661373538643236636631666662
39643664303137356562313061306439623239656534323065306132643833383738623261393232
63643434396165343631633063616161616430373130663830623936306339393933653437393931
37633532363264636537343165316231363130613964646635666665363136623637326561323336
30386235366261353661656231396362366263316338663135663333306434306563363464363336
35376233303939393039646261633833656337666335636333343030343435656664306433363530
36306636303530336262396664646331663834336235663236656636353833396437303636373133
64313639346164656438613066636661353736613334383734633232376335323761396634363031
65333631636337323630353165356539306531393434633163373637373739366131363734353934
34373762303661316235353162636132623736646630663438366433376639613964