inventories/group_vars/all.yml

@@ -1,4 +1,6 @@
 ansible_host: "{{inventory_hostname_short}}.{{host_domain}}"
+passbolt: 'anatomicjc.passbolt.passbolt'
+passbolt_inventory: 'anatomicjc.passbolt.passbolt_inventory'
 sysadmin_mail: sysadmin@verdnatura.es
 sysadmin_group: sysadmin
 smtp_server: smtp.verdnatura.es

playbooks/passbolt.yml

@@ -1,9 +1,6 @@
 - name: Fetch passbolt password
   hosts: all
   gather_facts: no
-  vars:
-    passbolt: 'anatomicjc.passbolt.passbolt'
-    passbolt_inventory: 'anatomicjc.passbolt.passbolt_inventory'
   tasks:
   - debug:
       msg: "Password: {{ lookup(passbolt, 'test').password }}"

roles/debian-guest/templates/nslcd.conf

@@ -8,7 +8,7 @@ idle_timelimit 60
 
 base {{ ldap_base }}
 binddn cn=nss,ou=admins,{{ ldap_base }}
-bindpw {{ nslcd_password }}
+bindpw {{ lookup(passbolt, 'nslcd').password }}
 pagesize 500
 
 filter group (&(objectClass=posixGroup)(cn={{ sysadmin_group }}))