dokku-ansible-deploy/plays/lib/vars.yml

---
- name: Check if the app config file exists
  stat:
    path: "{{ app_config_root }}/config.yml"
  register: config_yml

- name: Load unencrypted variables
  no_log: true
  when: config_yml.stat.exists
  include_vars:
    file: "{{ app_config_root }}/config.yml"

- name: Check if a vault directory exists
  stat:
    path: "{{ app_config_root }}/vault"
  register: vault_dir

- name: Load encrypted variables
  no_log: true
  when: vault_dir.stat.exists
  include_vars:
    ignore_unknown_extensions: true
    dir: "{{ app_config_root }}/vault"
    extensions:
      - yml
      - yaml