feat: update Ansible configuration and add 1Password lookup plugin for secret management
Some checks failed
Nix Format Check / check-format (push) Failing after 37s

This commit is contained in:
2025-03-11 15:54:31 +01:00
parent 6816f125eb
commit 47fb912c15
6 changed files with 106 additions and 24 deletions

28
config/ansible/README.md Normal file
View File

@@ -0,0 +1,28 @@
# Ansible Configuration
## 1Password Integration
This Ansible configuration includes a custom lookup plugin for fetching secrets from 1Password.
The 1Password CLI must be installed and authenticated on the machine running Ansible.
### Usage
```yaml
# Simple password lookup
password: "{{ lookup('onepassword', 'item-name') }}"
# Fetch specific field
api_key: "{{ lookup('onepassword', 'item-name', field='api_key') }}"
# Fetch from specific vault
database_password: "{{ lookup('onepassword', 'database', field='password', vault='Development') }}"
```
### Prerequisites
1. Install 1Password CLI
2. Sign in to 1Password using `op signin`
3. Service account should be properly configured
For more information, see the [1Password CLI documentation](https://developer.1password.com/docs/cli).
```