Fetch the Vault password from the Keepass database.

ansible.cfg

@@ -12,6 +12,7 @@ pipelining = True
 retry_files_save_path = /tmp/
 system_warnings = True
 unparsed_is_failed = True
+vault_password_file = vault-passhole
 verbosity = 2
 
 [inventory]

vault-passhole

+#!/bin/sh
+set -eu
+
+ph show --field Password "${VAULT_PASSWORD_PATH:-shore.co.il/Ansible vault}"