- hosts: management
  become: yes
  vars_files:
    - vars/mgmt.yml
    - vars/mgmt_vault.yml

  roles:
    - external/geerlingguy.mysql
    - external/geerlingguy.gogs

# MySQL Variables
mysql_packages:
  - mariadb-client
  - mariadb-server
  - python-mysqldb
mysql_root_password: "{{ vault_mysql_root_password }}"

# gogs Variables
gogs_use_mysql: true
gogs_db_name: gogs
gogs_db_username: gogs
gogs_db_password: "{{ vault_gogs_db_password }}"

---
vault_mysql_root_password: !vault |
      $ANSIBLE_VAULT;1.1;AES256
      64333838636532626438356338323763643437316264396566333136643762613137633035306236
      6263643932396465323735316265366364303933323263320a316665653536396537363461613334
      38636162326164653338313131653432383538376235366439383832316136303364653938623236
      6161333163666464350a356561653537316464656163333336663236326635366161316436393630
      6566
vault_gogs_db_password: !vault |
      $ANSIBLE_VAULT;1.1;AES256
      35656566333434353231306131366434626534333830386330633633333831356437643366643937
      3637343238373064326438643864396234366438353038650a383764633937663461663838383337
      64633264306634643638373039656464356339306662636231343132623538643239316138393866
      3739666466613761350a336462346665633663646236326363343536326239666138633463653361
      3464

fatal: [mgmt]: FAILED! => {"msg": "{{ vault_gogs_db_password }}: Attempting to decrypt but no vault secrets found"}