Skip to main content
Kill -9 Club
Sign in

Encrypting a secret, and keeping the password elsewhere

Encrypt with ansible-vault the values a repository must not hold in clear, keep the password file outside the repository, and put no_log on the task that uses the secret.

22 minutesTechnical content last reviewed on 18 Sept 2026

This lesson is for signed-in learners

Create an account to subscribe and record your learning progress.

Sign inCreate an accountBrowse the course catalogue

What this lesson builds

  • Keeping secrets out of the places that publish them
  • Describing a machine's state and reading what a run reports
  • Using Git history to answer what changed

End of the course

The capstone: from repository to production

The whole curriculum on one machine: build a production service, break it, restore it, and prove it holds.

Continue to the next course