Use ansible-vault for the passphrase

playingfield · Nov 4, 2024 · be2041b · be2041b
1 parent dad7407
commit be2041b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/roles/semaphore/defaults/main.yml b/roles/semaphore/defaults/main.yml
@@ -13,4 +13,4 @@ vault_access_key_encryption: "{{ lookup('pipe', 'head -c32 /dev/urandom | base64
 vault_admin_password: "{{ lookup('pipe', 'head -c32 /dev/urandom | base64') }}"
 vault_cookie_encryption: "{{ lookup('pipe', 'head -c32 /dev/urandom | base64') }}"
 vault_cookie_hash: "{{ lookup('pipe', 'head -c32 /dev/urandom | base64') }}"
-vault_ssh_passphrase: "{{ lookup('pipe', 'head -c32 /dev/urandom | base64') }}"
+vault_ssh_passphrase: "{{ ssh_passphrase | default('') }}"