Enable Ansible Vault support - Alfresco Content Services - 23.4 - 23.4 - Ready - Alfresco - external - Alfresco/Alfresco-Content-Services/23.4/Alfresco-Content-Services/Install/Install-with-Ansible/Configure-your-installation/Secrets-management/Enable-Ansible-Vault-support - 2025-06-02

Alfresco Content Services

Platform
Alfresco
Product
Alfresco Content Services
Release
23.4
License

To start using Ansible Vault integration, a password needs to be provided to Ansible to make encryption/decryption working during the play.

There are different ways to provide that password Ansible Vault, from manually via user input on each ansible-playbook run using the --ask-vault-pass flag (example below), to more advanced scenarios.

pipenv run ansible-playbook --ask-vault-pass playbooks/acs.yml

While we recommend to refer to the official Ansible documentation to properly configure Ansible vault, below is a basic configuration that will help you in quickly installing Alfresco without to having to input the Vault password every time. For the official documentation of configuring Ansible vault, see the Protecting sensitive data with ansible vault on the Ansible Community Documentation site: https://docs.ansible.com/ansible.

Configure a password in a file (e.g. ~/.vault_pass.txt), optionally auto generating it with:

openssl rand -base64 21 > ~/.vault_pass.txt

Set ANSIBLE_VAULT_PASSWORD_FILE to that file location so that can automatically picked-up when running Ansible:

export ANSIBLE_VAULT_PASSWORD_FILE=~/.vault_pass.txt

Now you are ready to start using Ansible Vault.