Install: Ansible Vault

Ansible Vault is a feature of Ansible that allows users to encrypt data with AES 256 cipher. This allows us to secure sensitive data, such as passwords and keys, and have Ansible decrypt them automatically when they are needed.

We will use this to encrypt accounts.yml, where all the account info is stored.

Note: For more information on Ansible Vault, checkout the Ansible Vault Primer.

1. Set Nano As Your Current Editor

export EDITOR=nano

Note: This is only needed for new installs as Cloudbox installer will set nano to be the default editor.

2. Create a Password File

1. First we need to create a password filr.

   nano ~/.ansible_vault
   

2. Type in your password:

   yourpassword
   

3. When done editing, save the file: Ctrl + X Y Enter.

3. Edit Ansible Config

We will now need to add the location of the password file into ansible.cfg, in the format of:

1. Edit ansible.cfg:

   nano ~/cloudbox/ansible.cfg
   

2. Add the following line:

   vault_password_file = ~/.ansible_vault
   

3. It should now look like this:

   [defaults]
   inventory = inventories/local
   callback_whitelist = profile_tasks
   command_warnings = False
   retry_files_enabled = False
   hash_behaviour = merge
   vault_password_file = ~/.ansible_vault
   

4. When done editing, save the file: Ctrl + X Y Enter.

4. Encrypt accounts.yml

1. Run the following command:

   ansible-vault encrypt ~/cloudbox/accounts.yml
   

2. You will get the following output:

   Encryption successful