Encrypting the vault password with GPG protects the key when stored on disk and allows it to be accessed non-interactively, as long as the GnuPG agent is set up correctly.
11 lines
174 B
INI
11 lines
174 B
INI
# vim: set ft=dosini :
|
|
|
|
[defaults]
|
|
inventory = hosts
|
|
|
|
gathering = smart
|
|
fact_caching = jsonfile
|
|
fact_caching_connection = .fact-cache
|
|
|
|
vault_password_file = .vault-secret.sh
|