Home / server / Questions / 757577
Accepted
wishi
Asked: 2016-02-17 08:50:58 +0800 CST

How to handle a private key SSL certificate with Ansible

  • 772

I'd like to deploy my webserver config with copy.

Is there any way to keep the SSL cert private key encrypted, and to decrypt it when the playbook is started?

The reason is that I want to to use Github's private repositories. But the file will still be in the cloud and one click away from exposure.

ssl-certificate

1 Answers

  1. Best Answer

    Have a look at Ansible Vault.

    Is short, it's a way to store encrypted YAML files, which can be decrypted directly by Ansible.

    You then would run ansible with --ask-vault-pass:

    ansible-playbook site.yml --ask-vault-pass
    • 1