Skip to content

Vault: re-encrypt files as values #468

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
mcint wants to merge 4 commits into
base: master
Choose a base branch
from
Draft

Vault: re-encrypt files as values #468

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
add189a
vault: use vault-ids, share re-encrypt script
mcint Mar 26, 2026
7d75169
vault: re-encrypt file to strings
mcint Mar 26, 2026
3d06c47
vault: add uv script shabang with deps
mcint Mar 30, 2026
4391559
vault: re-encrypt groups_vars/all/vault
mcint Mar 30, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion ansible.cfg
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,9 +2,9 @@
inventory = hosts.yml
host_key_checking = True
ansible_user = root
vault_password_file = .vault-password
collections_path=collections
roles_path=roles
vault_identity_list = prod@.vault-password, dev@/home/user/.vault-pass.dev

[ssh_connection]
pipelining=True
75 changes: 43 additions & 32 deletions group_vars/all/vault
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,32 +1,43 @@
$ANSIBLE_VAULT;1.1;AES256
35653735346363333139383934396433393865613964396638363531313631663839346232626565
6639396137353434653661623135616536333037376333350a666336316662323638636265386338
36623566363235386461633464323633333766316431643230353432383063656631323733356561
6531663337363963320a336638333030323164613132326137366165663663343363636436363931
38626438623536626336656332303235386366376132303237356664316365356361386563396137
33396331396231633961613536393238313730336238613534393838386336373137666161393235
39316561666133373937303334386632663134653536376638643363663763356264643437643839
39303135376364326339323834626432343138666463316532656432666261353461306338633161
35663137303364363531643239613233383230643630366463303663353534303236373335636431
39633332363937636461663437663535346331666332353038313839653064333861623739616665
61643866326334383366373638376662373163623437323465623364373063666538376637373633
38623339393735663435613464303331633265373835633564333664383165636230646438666137
61363966623261353765363662646632633263353565386265376262653638353632383936373562
33643463303766623638656338333164613536383333353838356238376237633632383565616335
63343936633033343062636163663761376638623536363735643438306565636462613839383964
34613565373062626139303361393564333764363836666537383234643637323336303232383938
36623533363334353330643831303431313363343532333862616434306666383766303839393731
37666361373332663737626464333931343365643134313837626535656139323464623064366365
61626230326437666164323361306332643234653839626562333533326238376432346231313735
61333238313262303463313137306363613330363664653635333430343265303662363332326265
39643438303237643737353636386333316237316437346230633534326639303862373432656266
39626337313862396463363239613632383865636433383732616532393765653763313532613030
37313133373764643137653965303738303165636134313733383161633034336137356463326338
33353865616565623037613230313962323262653637653266643339343032326661343965396134
32343761323964376265623162396365313163653634366330376363346161653831346330396634
63663138316136336365666661343336646637636334656164646331386162633836306632343535
39653937363939643531653532636163323662343933666638633837393831346331316136346464
65323436653737356531386262346239633235336533653161393165343566663133666663396638
66343161663033616532323233396330613838333734616239616332333232626236333963303637
39663465363736336437363062313465613863393935313364666131343761613265303234306266
353961646465343062643065373137383738
---
vault_noisebridge_github_client_id: !vault |
$ANSIBLE_VAULT;1.2;AES256;prod
65656434313331343436373662663233636230373864613637626632316662336637326361343131
3239363538613264383639383437646231613362343062380a376366613836353636613936303031
35646635383330623737383361613138613733333465373463633233323236646334363838636236
6266383235303439360a616566353735616466313364366165383062346332623032386330386433
66376438376530636263616333396665343061663631616636613031386266666261
vault_noisebridge_github_client_secret: !vault |
$ANSIBLE_VAULT;1.2;AES256;prod
63306239633366656637636632626138643965643633383938633864656632373962646633393535
6237353138646262313932373337663062633662383439340a363430363939643331663463343132
65303735343933373262616230366333646161663734343539346636396165666338633835653337
6463383261643537650a626337343963313563336236666431343439383030303638306264333463
33393631333363623430623337636434393265663133663035313232353064653430346535353365
6633336636653139613661616632613062653165393964343232
vault_noisebridge_jwt_token_secret: !vault |
$ANSIBLE_VAULT;1.2;AES256;prod
36616534353134633762613663306531343837353961346331376164613663656564363535356234
3565323737383736626635623137373037306265313963610a623761613130633963303434326536
38366133623063363937663838326330626330366366613136626637626366306134646337666163
3530626636323134370a363731343965376164623837616136363163393664363666386238306332
63353633616439643863353538623863653661343730376361653938383461383534396134653032
32616466353835353635363561653433366438613734383536616334363031363863323836343239
38396337326239353232643962656633353733346534393637326437346339633633626432393061
64313061653538653365
vault_noisebridge_prometheus_password: !vault |
$ANSIBLE_VAULT;1.2;AES256;prod
37346235633862303061383231333230616264303337323663393639353339636334303439376234
3430376366306538663764333265316134633331316261620a383736633462396265663365346561
61643563643930386164356461303661656237343166623030333931313762646365363635383230
3638616632613231340a323838616362376463613130333539363733366634633138373339623961
34353063323735356136633430356364373535386666666461373963386535386461366564303535
3935663566356137653831396633636564323032653531306361
vault_noisebridge_prometheus_password_hash: !vault |
$ANSIBLE_VAULT;1.2;AES256;prod
35393962396465616563623231333864656664653265306536663335653564353362353635383265
3137303835343830333030353335323635383939313264640a666164303765356464333338306430
65353839333064343066653532346566663835373231383339386132653661316164343466323037
3939646333313262300a666565643163623061656434353436356239316431643332646332303066
64396666613032666439333139646164313961393030313333376630333463383862313334653537
61343164636165316436363030323336653531303632613335353434343836326464386131303635
326463393565666431386637383963613865
46 changes: 32 additions & 14 deletions group_vars/m5_noisebridge_net/mysql-secrets.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,14 +1,32 @@
$ANSIBLE_VAULT;1.1;AES256
39643637396530663734383836393034343165613265643866393832656235366336313037336664
3435343234326139646134663037633431626461643961340a613233666530616561336632353739
32353539346466613730643164383733363031363330313162326464663732666337373365303739
3632656535306266300a303430336533306361633537383831616664663434383766343564666361
31366139386162393466313265666135633232623030376435306532666461346465323766323337
62393261383863623538356337343938356138373161363032396665656332396362383038646436
38333465336232323235383466646330343231343362663434653533373031356166336534396539
39393631643139383235373334343730366437303261663965636431343931393131636135393932
38353462653134643435383832623536396331643838303336623662656339396361353936663338
65633164333065656334336461643861306237383638663436633237373639633665656330336463
31666366323031393434363964653430386637353939363761613230656135363965313738656331
35363463373265303631646230383161626233336163356630386262396135613534383965343936
6636
---
mysql_root_password: !vault |
$ANSIBLE_VAULT;1.2;AES256;prod
31623436366339363665333534646439323632356236666532666337323562373033353737316630
3866623031636633646130353532383836366162313262620a366566383737636563393639386532
64326334356231366131666538613230623931303262663136656232633865363336383164633930
3335366437346636390a393931316166343537343335373436613134663566316136616139393362
33376631333731306561313135393835363265356463613764393064643661613938316635356634
6632653362613064326433343030303761633565623164313632
mysql_users:
- name: !vault |
$ANSIBLE_VAULT;1.2;AES256;prod
64663939316232333964626539633162313632363233663032616337363132663961626263626361
6238626331306237323363303964396633323862363338390a313462643764646636633362303635
63343632373837643136333762623839313939616665626436393333376231346564316466333766
6564393933343531300a323266383261343931393031646439393831386332366632393664623036
3834
password: !vault |
$ANSIBLE_VAULT;1.2;AES256;prod
61393332613462396534326539383863643763353534306338316362666338333563366133313866
3765353837663438373438366661386339313537656339340a373630306462373134326566356531
66656532643664346264373432633030646630663662653431393432313031636536643735636631
3364616638613430340a633735383665623237616162613230363336653630646236663465313661
65333139353339326565373335323532396534363435363063383263316563303030323966336139
3965316361636339326131323631633136343230343064393935
priv: !vault |
$ANSIBLE_VAULT;1.2;AES256;prod
34366564386264373864303135306665313138336632613538643130613863363038313634656232
6538646664616234626234646261313437363035656131330a313162616437646133316635636466
38306234353661633236393432346236333433626539386464633365356437333664656535646331
6636643765386562340a666339356463356463333738353866323738646535333065646132386637
35326663666131656564346666383563323965396333353832656335633839613138
86 changes: 59 additions & 27 deletions group_vars/m5_noisebridge_net/pydonate-secrets.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,27 +1,59 @@
$ANSIBLE_VAULT;1.1;AES256
63636234373436346366616331663162346530623964386236663461353637323136333063333063
3834393930613761336631373365333566373631373132320a306464393537653236613537393030
32636139643732333365616666353166316264353432323861623439333432336331623838636239
3632316362336366330a646431316133386135396562313930343131393766313735393236366332
32616164346434323235303739313435623839643834666263666361303734663434343731613363
37333961323735363737613836333663303037343266633036303930363761653561633362343464
62376234323939346666623334336135623539313631363464613534383433623937623363646537
62343566626464616530363531633838356235643064393934636334633061623261656139653333
66616631313738636233633061306366326339663831363438353033646564613266633066643038
31386665356335313434343334616236626337613530333339653766633761326434613939613466
66393963656264356663653063626665353435656537666465653564333732356439333131393636
66373332336465363731613764643638323432386438643530393633613963343264303633373662
39643032346265363239396464666435663137393563653135303564333833396433393331373135
33656232396132323231356264376238626161323763653134653362393531323261376630623532
36646636646364386639373633376334623636616134356339316465616437303237356638313336
34633435326235393037323561663436626432316239366436666663323931353966333365656434
66363033386561316561333463653235333464616465353736313835393631313564383230653730
30393366313566653930316230316264633932613566333165363066373538343133366162396238
63656134313736646438643738326563373435323530383735643566623733633132396365666364
66313038633636646333336633376139373139623764653838303537336163323231623265636632
32613032386436613332613537346532356336613961386634373630323338646230653631373665
66623533653164643765303830346434333061353831646263623161393535616231333065326366
34376464653466366435633964646261353366616463353436333532353935633337663338653738
65663437646333366130663136636232373363386230346136393465643936386337353031373336
37383366376131656435353961333564613662323262616430633066663163363638316236313764
3561643561363733396539643633313637633437393631663338
---
pydonate_config:
secrets:
db_pass: !vault |
$ANSIBLE_VAULT;1.2;AES256;prod
36656331343531373763393933336636313062396132326166646438626261623562323965643835
3866376530366266353530313430636534303834623739320a646162663562306430373035616132
30373162346661333462623434326131313638613231373636373065653763326566643434633439
3163666262613065350a393336623661333764383161386537373861313862306334343731313739
31326434633236626533333434366633653164356231343330623838386331633039336634333262
3237313162306462333137313339623663323432343562646431
donate_product: !vault |
$ANSIBLE_VAULT;1.2;AES256;prod
64373137306235393430366261613430313962636530313562323439316231613063353534326535
6432636230343939326336656437626565333036363166340a343834346561313863343830303966
33313337323262393931613434386136656531313539313065613462303261336165306337396132
3538336132636335330a346135343138663631353962343861373366393133316564353333333332
63313631336661643136623461316163643337663339646435396464373034333034
donate_secret: !vault |
$ANSIBLE_VAULT;1.2;AES256;prod
36363533303162323863363961633631343038303633663431663164646635366333623366663339
3338373635393431326466336535643738633762373932640a333261323662616362313162353463
39653138633331636137373732316362356238333064643936383162313265356438666636313565
3830633833653165390a643866623463356662336365646136656130386266366133613436636239
32353334636163316533323964623361373333336631376433323266643134363933353231643862
38333235333833396635623730326331646630653034353831303063616633613438343433333362
363333356335396238653039346637346430
recaptcha_secret_key: !vault |
$ANSIBLE_VAULT;1.2;AES256;prod
38616461656136656465366263366331343339643132316631613761376235616431626539633437
6531393236376236343164666662393432313464643761620a373565326662383061653233323463
32303863343330383430373161336332353435623762353736613731396264363830313130343432
6635353538613335330a613838306636373137633431356630643634333131376531643436366634
34366534643736326333656539323863616436396531353861636161393866346138343932373231
3539386630633038383864373933306139376532343830326239
recaptcha_site_key: !vault |
$ANSIBLE_VAULT;1.2;AES256;prod
63373839323462653439656339626565663866393936356437633530386165636233653739643931
3661373264313839653835653466666335626139356462340a336331386363373735616462343737
33326638333339653961663436363531636531393165353433663332616365323866623138383634
3065663262303839610a666634626135313164626534323535666263303730623536613566333730
66616266313533333630646561633837613734346538376332333436313330353030323965326432
6264636139346438646235616462343937373562326564306466
stripe_key: !vault |
$ANSIBLE_VAULT;1.2;AES256;prod
34653736383032636137306636326636323630643338383137343262343333346365306562343332
3062396632386439386534666532626664613266356161630a373438333266356330353866393962
63373530646433323235653933643566363935656564613063313031356334366637376339333534
3038363361373033660a376436363764396536666339316330386531346439356237373861333065
65373537353539383830663566343964623932636236303461356432643965363839353232363661
6137663731363634343663396536346666326434373239383932
stripe_secret: !vault |
$ANSIBLE_VAULT;1.2;AES256;prod
65663764383431666135663166643864306431326433353063623863326464393665666434333161
6531373361613363363232363539343436303030643639380a626239633761646335333265633461
32313661666237343139643238363635333865616161386231366238396239353039373065656636
3335636134633265610a346465303335643238646533303462316464333465376665626336653833
33626565623735616437653933633636363465353234646137353830336164316139643033373735
3237343333633066326366303365333831633233663338356162
67 changes: 46 additions & 21 deletions group_vars/m6_noisebridge_net/library-org_secrets.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,21 +1,46 @@
$ANSIBLE_VAULT;1.1;AES256
31356238353439353630313865343832366431343931376434373430306365346435343638353133
3437353031653961643563333261396564383932326239300a316164363761326531336137656633
32363436613363333539386161663630353735323937656534656464313264366134643238373238
3332623762383664620a343961643035396664336464313731636539643734643639366134313234
61653837656434353062653861666166653639363435646363366661616262373763353564653665
64323435346561653561353333376632373339383338343232396661326165623134633263316237
65396365356161313335633930346332323638393331333064303732366432336264396366653634
65636262316434323935316637353333316133663836393866353030326133336437646265343336
62306235386532643732353862613432396564333338313338346431393433666135343736653861
32353630356438333230643931656136623639383034383437623234613037646462643562623461
32346166653164336138333936626263666131613862643233346134346335393762343437346138
66356330393935333535393732663066616136383532313331633362333430313639653563646662
32663662383435333936336236383130623031343630326433306538356461626536313164613535
65643738373734393233336562646132376561626137306538613439306138376233653434323437
32316230383062303465396632313639353730633935303462326330313864626364643364626235
35613764346661386237656362323138633630313930303933383836306465353438306438666339
66346161343732373930383839333532636366386165646266353832323435376364393666393863
36343366336439343763643833633631376165343131303132343236333734653165623132643338
32626434343439363030636438663631666637303938643235343865626662313732383230623232
34353836663139646532
---
library_org_config:
secrets:
app_secret_key: !vault |
$ANSIBLE_VAULT;1.2;AES256;prod
61666464643864343430373637326136623630343532373031343236643432656663653661666235
6639623837313433666233313264663133343630663864640a373430663332356562356234643538
35343065633863373232646364643930356662323831396661653766663730613337306337653433
3266613836626330340a373362333261393362306665303037333932656233343537646231656236
35613864343165363533326534653064643239303963356533633065346230623064
new_isbn_submit_seret: !vault |
$ANSIBLE_VAULT;1.2;AES256;prod
35306434333430376536386463376539643264623162333730373066376262656562633731613833
6634333765636433323266336661353139653365306630640a653134386164383439616130363338
62376165303031653363353831653736383236643238626132316463383230656230333339313034
6632633739386435630a623461333533633334393032363236666538383432313633613562643738
61653234386435363131646335326666323235303939613730623266313731643834
new_location_submit_secret: !vault |
$ANSIBLE_VAULT;1.2;AES256;prod
66623933393438333935323837613766373733396664636335333665636365333936396230663430
6332346437313164373463633864303631303837356166340a313537643838633339386238316266
35643563633032626162363262313165303164376436366233313831306135343331303738613234
6534633138313761630a613866666333663164646263643837656139366465393235666532366365
66363632356137663161333163653337303463393433636466633636336632616437313463323666
6435373632386137663163616634613764356436633262363838
recaptcha_private_key: !vault |
$ANSIBLE_VAULT;1.2;AES256;prod
39346465373662353136313534653539373737663963343839323739383235343132366238613737
3138333866633261323238326339356239643734393237350a316463303731313534366635616338
66313234363231643235326236303237626632306565313664373039396238353633366631653033
6239336161623562300a313539306461633861383832363863623332626262636235636665623063
3538
recaptcha_public_key: !vault |
$ANSIBLE_VAULT;1.2;AES256;prod
38316562633761663233353635366337613638613237353833373436353735363330303831383538
3634653264323865626466633532393932623834313932360a336365386538366163353332356662
64376232626262306134393731623634663366386135623565306333613131373162633465326363
6535633530616636630a386663663632353435366236613062396137656433303131316234306361
3462
wtf_csrf_secret_key: !vault |
$ANSIBLE_VAULT;1.2;AES256;prod
39363164323363626437326365393861353932643935306464623366323665633133323166396561
3962346230663131626236373364346630386139653536320a396139363464623538633765303432
37656631303637326362356335633436373361333764356361303663393837346333336336633238
3431626366636531340a313866323437306262376531323636356538346361623930653431356163
39613334303436633431303639356363376139653630373462323763613935643039
Loading