Add Ansible Vault

Vagrantfile

@@ -19,6 +19,7 @@ Vagrant.configure("2") do |config|
     ansible.playbook = "ansible/provisioning/main.yml"
     ansible.inventory_path = "ansible/hosts.ini"
     ansible.become = true
+    ansible.ask_vault_pass = true
   end
 
 end

ansible/provisioning/main.yml

@@ -2,16 +2,17 @@
 - hosts: dransible
   become: true
 
-  roles:
-    - geerlingguy.apache
-    - geerlingguy.mysql
-    - geerlingguy.php
-    - geerlingguy.php-mysql
-    - geerlingguy.composer
+  # roles:
+  #   - geerlingguy.apache
+  #   - geerlingguy.mysql
+  #   - geerlingguy.php
+  #   - geerlingguy.php-mysql
+  #   - geerlingguy.composer
 
   vars_files:
-    - vars/main.yml
-    - ../vars/main.yml
+    - ../vars/vault.yml
+    - ../vars/vars.yml
+    - vars/vars.yml
 
   tasks:
     - name: Create a database

ansible/vars/main.yml

@@ -1,3 +0,0 @@
-app_db_name: drupal
-app_db_user: drupal
-app_db_password: drupal

ansible/vars/vars.yml

@@ -0,0 +1,4 @@
+---
+app_db_name: "{{ vault_app_db_name }}"
+app_db_user: "{{ vault_app_db_user }}"
+app_db_password: "{{ vault_app_db_password }}"

ansible/vars/vault.yml

@@ -0,0 +1,10 @@
+$ANSIBLE_VAULT;1.1;AES256
+36656233323539616336393838396137343939623233393338666530313730373233663263633065
+3133633335316364306366333539613936376239383133330a356365666232623537333730663638
+37393264616134613163663762666464373733663737383039316163336263323538393533323266
+3432346662613438330a386435393432323761386137333736363436386466643031386662353933
+30393631386463313265653862633866663530626439623063393934653235666530656462643135
+39366431353762383434663536663761323565616564336131666339653038326333306433326264
+31623539643166626234663736656337633036323837333137343533386165366531626462643662
+66626631663930626266653937323634366231326537626131663662396335393361336635373736
+3435