diff --git a/ansible/ansible.cfg b/ansible/ansible.cfg
index 122975a..ff40388 100644
--- a/ansible/ansible.cfg
+++ b/ansible/ansible.cfg
@@ -1,6 +1,7 @@
 [defaults]
 remote_user = mike
 inventory = ./hosts.yml
+vault_password_file = ./vault-pass.sh
 interpreter_python = auto_silent
 
 [privilege_escalation]
diff --git a/ansible/vault-pass.sh b/ansible/vault-pass.sh
new file mode 100644
index 0000000..993acea
--- /dev/null
+++ b/ansible/vault-pass.sh
@@ -0,0 +1,5 @@
+#!/bin/sh
+
+set -e
+
+keepassxc-cli show -s -a password ~/vault/Passwords.kdbx Ansible Vault