diff --git a/ansible.cfg b/ansible.cfg
new file mode 100644
index 0000000..d9af9ac
--- /dev/null
+++ b/ansible.cfg
@@ -0,0 +1,8 @@
+[defaults]
+remote_user = mike
+inventory = ./hosts.yml
+interpreter_python = auto_silent
+
+[privilege_escalation]
+become_ask_pass = True
+become_method: doas
diff --git a/hosts.yml b/hosts.yml
new file mode 100644
index 0000000..c856d36
--- /dev/null
+++ b/hosts.yml
@@ -0,0 +1,4 @@
+arch:
+  hosts:
+    thonx:
+      become_method: doas
diff --git a/vault-pass.sh b/vault-pass.sh
new file mode 100755
index 0000000..ec43ca9
--- /dev/null
+++ b/vault-pass.sh
@@ -0,0 +1,5 @@
+#!/bin/sh
+
+set -e
+
+keepassxc-cli show -s -a password ~/vault/Passwords.kdbx 'Ansible Vault'