From 63c2781678663a84ad1ad1f091c45dea7e2635ad Mon Sep 17 00:00:00 2001
From: Mike Wilson <mike@mjwilson.org>
Date: Mon, 31 Mar 2025 19:36:04 -0400
Subject: [PATCH] Set up password script for Keepass

---
 ansible/ansible.cfg   | 1 +
 ansible/vault-pass.sh | 5 +++++
 2 files changed, 6 insertions(+)
 create mode 100644 ansible/vault-pass.sh

diff --git a/ansible/ansible.cfg b/ansible/ansible.cfg
index 122975a..ff40388 100644
--- a/ansible/ansible.cfg
+++ b/ansible/ansible.cfg
@@ -1,6 +1,7 @@
 [defaults]
 remote_user = mike
 inventory = ./hosts.yml
+vault_password_file = ./vault-pass.sh
 interpreter_python = auto_silent
 
 [privilege_escalation]
diff --git a/ansible/vault-pass.sh b/ansible/vault-pass.sh
new file mode 100644
index 0000000..993acea
--- /dev/null
+++ b/ansible/vault-pass.sh
@@ -0,0 +1,5 @@
+#!/bin/sh
+
+set -e
+
+keepassxc-cli show -s -a password ~/vault/Passwords.kdbx Ansible Vault