configpolicy

dustin

Author	SHA1	Message	Date
Dustin	55128cded7	ansible.cfg: Unset vault_password_file Apparently, the `vault_password_file` setting in `ansible.cfg` overrides the `--vault-password-file` command-line argument, which breaks the Jenkins `ansiblePlaybook` task.	2018-04-14 15:57:50 -05:00
Dustin	6d9406e389	ansible.cfg: Set remote_tmp Many hosts (should) have `/tmp` mounted with the `noexec` flag, which prevents Ansible modules written there from running. To work around this, the `remote_tmp` configuration option should be set to a path under `/var/tmp`, which is not mounted noexec.	2018-04-08 14:26:53 -05:00
Dustin	20fb830eda	Protect vault secret with GPG Encrypting the vault password with GPG protects the key when stored on disk and allows it to be accessed non-interactively, as long as the GnuPG agent is set up correctly.	2018-01-29 15:11:07 -06:00
Dustin	7f86881b7c	Initial commit	2018-01-02 23:36:42 -06:00