Ansible Ansible Vault, Roles and the Road to Production Encrypt secrets with Ansible Vault and keep them out of logs, refactor playbooks into a role, lean on lint and CI, and name what actually changes when this becomes real infrastructure.
