This shows you the differences between two versions of the page.
Both sides previous revision Previous revision | |||
сервис_ansible [2025/08/25 16:26] val |
сервис_ansible [2025/09/17 06:45] (current) val [Роль OpenVPN сервера] |
||
---|---|---|---|
Line 737: | Line 737: | ||
* [[Сервисы Gateway и routing#Управление таблицей маршрутизации]] | * [[Сервисы Gateway и routing#Управление таблицей маршрутизации]] | ||
+ | ==== ansible-vault ==== | ||
+ | <code> | ||
+ | $ ansible-vault encrypt_string --vault-id @prompt strongpassword | ||
+ | </code><code> | ||
+ | New vault password (default): 12345678 | ||
+ | ... | ||
+ | </code><code> | ||
+ | Encryption successful | ||
+ | !vault | | ||
+ | $ANSIBLE_VAULT;1.1;AES256 | ||
+ | ... | ||
+ | 6234 | ||
+ | </code><code> | ||
+ | ~/openvpn1# cp inventory.yaml inventory2.yaml | ||
+ | |||
+ | ~/openvpn1# cat inventory2.yaml | ||
+ | </code><code> | ||
+ | ... | ||
+ | ansible_ssh_pass: !vault | | ||
+ | $ANSIBLE_VAULT;1.1;AES256 | ||
+ | ... | ||
+ | 6234 | ||
+ | ansible_sudo_pass: !vault | | ||
+ | $ANSIBLE_VAULT;1.1;AES256 | ||
+ | ... | ||
+ | 6234 | ||
+ | ... | ||
+ | </code><code> | ||
+ | ~/openvpn1# ANS_V_SEC=12345678 | ||
+ | |||
+ | ~/openvpn1# echo $ANS_V_SEC | ansible-playbook openvpn1.yaml -i inventory2.yaml -e "variable_host=test_nodes" --vault-password-file=/bin/cat | ||
+ | </code> | ||
==== Фрагмент роли с условиями и отладкой ==== | ==== Фрагмент роли с условиями и отладкой ==== | ||