No description
Find a file
2026-04-10 15:18:53 +02:00
inventories feat: use authentik ldap outpost for ldap instead of 389ds+keycloak 2026-04-10 15:18:53 +02:00
playbooks feat: use authentik ldap outpost for ldap instead of 389ds+keycloak 2026-04-10 15:18:53 +02:00
.gitignore chore: add readme entry and configration for openbao secrets management 2026-03-27 16:46:18 +01:00
ansible.cfg chore: add readme entry and configration for openbao secrets management 2026-03-27 16:46:18 +01:00
Makefile chore: add ping_demo Makefile target 2026-03-27 18:14:05 +01:00
README.md chore: add readme entry and configration for openbao secrets management 2026-03-27 16:46:18 +01:00
requirements.yml chore: add readme entry and configration for openbao secrets management 2026-03-27 16:46:18 +01:00
Vagrantfile chore: increase memory and cpu for vagrant 2026-01-15 14:40:00 +01:00

reference-ansible

Secrets

Secrets are managed using OpenBao. Download the CLI binary once (not checked in):

curl -L https://github.com/openbao/openbao/releases/latest/download/bao_linux_amd64 -o ./bao && chmod +x ./bao

Authenticate and export token before running playbooks:

export BAO_ADDR=https://bao.digitalboard.ch
./bao login -method=oidc -path=Digitalboard
export VAULT_TOKEN=$(./bao print token)