ansible.cfg

[defaults]
# Keep the inventory next to the playbooks so ansible-playbook and ansible-pull
# resolve the same host groups by default.
inventory = hosts

# The pull timer runs as root on the managed server, so logging to /var/log is
# acceptable there. Local non-root checks can still override ANSIBLE_LOG_PATH.
log_path = /var/log/ansible.log

# Retry files add noise for this repo and are not useful for the daily
# ansible-pull workflow.
retry_files_enabled = False

# Vault: this is a PUBLIC repo, so any secret committed here must be encrypted
# with ansible-vault first. Two ways to supply the vault password:
#   1. per command:   ansible-playbook ... --vault-password-file ~/.ansible-vault-pass
#   2. for every run:  uncomment the line below (the file must never be committed;
#                      it is already covered by .gitignore).
# Keep it commented while there are no encrypted files yet, otherwise runs error
# out looking for a password they do not need.
# vault_password_file = ~/.ansible-vault-pass

# Keep output readable without switching to a more abstract callback plugin.
stdout_callback = ansible.builtin.default
result_format = yaml
callbacks_enabled = ansible.posix.profile_tasks, ansible.posix.profile_roles, ansible.posix.timer
bin_ansible_callbacks = True