build-all

roles/test/tasks/main.yml

@@ -0,0 +1,19 @@
+- name: Set banner
+  become: "{{ false if inventory_hostname == 'nas.home.lan' else true }}"
+  block:
+    - name: Read GitLab password from Vault
+      ansible.builtin.set_fact:
+        gitlab_password: >-
+          {{
+            lookup(
+              'community.hashi_vault.hashi_vault',
+              'secret=secret/data/gitlab '
+              ~ 'field=token '
+              ~ 'url=https://vault.home.lan:8205 '
+              ~ 'token=' ~ lookup('env', 'VAULT_TOKEN')
+            )
+          }}
+
+    - name: Show password
+      ansible.builtin.debug:
+        var: gitlab_password