diff --git a/ansible.cfg b/ansible.cfg
index d8ca0fd82d1ae91c9dfe98f366ebe20618021955..88f7e5cd112d94aa33db9fdadb83ec44f0514e58 100644
--- a/ansible.cfg
+++ b/ansible.cfg
@@ -12,6 +12,7 @@ pipelining = True
 retry_files_save_path = /tmp/
 system_warnings = True
 unparsed_is_failed = True
+vault_password_file = vault-passhole
 verbosity = 2
 
 [inventory]
diff --git a/vault-passhole b/vault-passhole
new file mode 100755
index 0000000000000000000000000000000000000000..746cbc0b4520104395aac8e002d78f149547dd17
--- /dev/null
+++ b/vault-passhole
@@ -0,0 +1,4 @@
+#!/bin/sh
+set -eu
+
+ph show --field Password "${VAULT_PASSWORD_PATH:-shore.co.il/Ansible vault}"