Add node IP addresses in Ansible inventory hosts
file, then run:
ansible-playbook -i hosts -e @secrets.yml.enc main.yml
Encrypt secrets file:
ansible-vault encrypt secrets.yml.enc
Decrypt secrets file:
ansible-vault decrypt secrets.yml.enc
Remove executable bit:
chmod -x secrets.yml.key
Windows 10/WSL: Ansible cannot read ansible.cfg from NTFS mounts
warning: Insecure world writable dir /mnt/c in PATH, mode 040777