- name: Set banner
  become: "{{ false if inventory_hostname == 'nas.home.lan' else true }}"
  block:
    - name: Read GitLab password from Vault
      ansible.builtin.set_fact:
        gitlab_password: >-
          {{
            lookup(
              'community.hashi_vault.hashi_vault',
              'secret=secret/data/gitlab '
              ~ 'field=token '
              ~ 'url=https://vault.home.lan:8205 '
              ~ 'token=' ~ lookup('env', 'VAULT_TOKEN')
            )
          }}

    - name: Show password
      ansible.builtin.debug:
        var: gitlab_password