# reference-ansible



### Secrets
Secrets are managed using [OpenBao](https://bao.digitalboard.ch).
Download the CLI binary once (not checked in):
```bash
curl -L https://github.com/openbao/openbao/releases/latest/download/bao_linux_amd64 -o ./bao && chmod +x ./bao
```

Authenticate and export token before running playbooks:
```bash
export BAO_ADDR=https://bao.digitalboard.ch
./bao login -method=oidc -path=Digitalboard
export VAULT_TOKEN=$(./bao print token)
```