ansible-vault-conventions

What problem does it solve?

Inconsistent secret management in Ansible Vault leads to security vulnerabilities, confusion, and operational errors. This Skill provides clear, standardized conventions for naming, encrypting, and templating vault files, ensuring secure and predictable secret handling.

Core Features & Use Cases

• Standardized Naming: Learn when to use vault_ prefixes for variables versus encrypting entire configuration files.
• Template Enforcement: Mandates .template files for all encrypted secrets, improving documentation and onboarding.
• Secure Workflow: Guides on .gitignore rules, encryption commands, and best practices for handling vault passwords.
• Use Case: When setting up a new service like Pi-hole, use this Skill to correctly create group_vars/pihole_vault.yml and its corresponding pihole_vault.yml.template, ensuring the admin password and API key are securely stored and documented according to project standards.

Quick Start

Use the ansible-vault-conventions skill to create a new Ansible Vault file for a service named 'nginx' and its corresponding template, ensuring all secrets are properly prefixed and the file is correctly gitignored.