💡 Feature Request: Add ability to use vault pass lookup plugins by default. about trellis

[swalkinshaw]

set ansible.cfg > vault_password_file to

vault_password_file=ansible_vault_1p_password

ansible_vault_1p_password is a shell script (in your $PATH somewhere) which uses the 1p CLI to get the password.

but i get you don't want to stray from the defaults.

We use the defaults to make it easier for people with a use case like one to follow Ansible's docs and standard ways of customization 😄

[swalkinshaw]

I don't think there's anything Trellis needs to do here. Trellis defaults to Ansible's default which is a .vault_pass file. You can easily edit the Ansible config file to specify a custom vault pass which can also be a shell script!

Here's a good tutorial I found: https://www.inetsix.net/posts/Ansible-vault-1password/

[chrillep]

I don't think there's anything Trellis needs to do here. Trellis defaults to Ansible's default which is a .vault_pass file. You can easily edit the Ansible config file to specify a custom vault pass which can also be a shell script!

Here's a good tutorial I found: https://www.inetsix.net/posts/Ansible-vault-1password/

Yeah sorry! Im really not connecting the dots here.
Brain 🧠 not firing good this morning.

step

1. set ansible.cfg > vault_password_file to
   ...

but i get you don't want to stray from the defaults.