Chapter 11: Ansible Introduction
11.8 Variables, vault awareness and secrets
Pass simple vars:
ansible-playbook -i inventory/hosts.ini playbooks/web_welcome.yml -e "page_title=badge API Lab"
Use group_vars/ / host_vars/ for structured settings. For secrets, beginners meet Ansible Vault (encrypted files) or inject from CI secrets. Do not commit plain production passwords next to playbooks.
Ravindra Bagale's Tip
World-writable permission shortcuts Ansible madhun pan chukichi. Least privilege modes (0644 files, 0755 dirs as needed) use kara. Dhyan rakho!