Secure passwords with ansible-vault

.gitignore

 roles/external
+vpass
\ No newline at end of file

group_vars/postgresql/postgresql-password.yml

+$ANSIBLE_VAULT;1.1;AES256
+61353464313735306238643034613765613136363630663139653135383735373130326461323330
+6230663839396432653937663234636165326463373438340a333233333963653864626131626166
+39663637363831303666626364306233656134343330383063353961396566376664303239633063
+3862623037376333360a616232303663656534366535636439326464336561306565393762393030
+30303730333730613731666161353564626638376132626238663931383764643133616135343336
+34663539336466663434346662373431623334383039366366393465656266326530623837306537
+62353630373866343031323030643065373739343766636439353035656136383739306231343866
+34346533343136643534623766666361323139623462316665623835656561656636373435643563
+6662

group_vars/postgresql/postgresql-users-example.yml

+#This is an example of decrypt file
+#---
+#postgresql_users_jane : "secret_password_1"
+#postgresql_users_joe  : "secret_password_2"
\ No newline at end of file

group_vars/postgresql/postgresql.yml

@@ -11,11 +11,11 @@ postgresql_databases          : [
                                 ]
 
 postgresql_users              : [
-                                  {name: "user_1", pass: "secret_password"},
-                                  {name: "user_2", pass: "secret_password"}
+                                  {name: "jane", pass: "{{ postgresql_users_jane }}"},
+                                  {name: "joe", pass: "{{ postgresql_users_joe }}"}
                                 ]
 
 postgresql_user_privileges    : [
-                                  {name: "user_1", db: "products"},
-                                  {name: "user_2", db: "partners"}
+                                  {name: "jane", db: "products"},
+                                  {name: "joe", db: "partners"}
                                 ]
\ No newline at end of file

plays/ansible.cfg

 [defaults]
-roles_path=../roles/internal:../roles/external
\ No newline at end of file
+roles_path=../roles/internal:../roles/external
+vault_password_file=../vpass
\ No newline at end of file