proxmox/group_vars/README.md

Ansible Vault usage

# Using Ansible Vault for secrets

- Create vault file (only once):
  ```bash
  ansible-vault create group_vars/proxmox/vault.yml

• Edit vault file:

  ansible-vault edit group_vars/proxmox/vault.yml
  

• Vault file supports nested YAML structures.

• Run playbooks with vault password prompt:

  ansible-playbook bootstrap.yml --ask-vault-pass
  

• Or provide a password file:

  ansible-playbook bootstrap.yml --vault-password-file ~/.vault_pass.txt
  

• Access secrets in playbooks as normal variables, e.g.:

  {{ proxmox.root_password }}