Add vault support

functions

@@ -14,6 +14,7 @@ function run_playbook() {
   local app="$1"
   local play_path="$2"
   local requirements="$3"
+  local vault_file="$DOKKU_LIB/ansible/$APP/.vault.sh"
 
   validate_dependencies
 
@@ -31,6 +32,19 @@ function run_playbook() {
   mkdir -p $DOKKU_ROOT/.ansible/{roles,plugins/modules}
   cp -R $DOKKU_ROOT/.ansible/roles/*/library/* $DOKKU_ROOT/.ansible/plugins/modules
 
-  dokku_col_log_info1_quiet "$play_path file found"
+  if [[ -f "$vault_file" ]]; then
-  ansible-playbook --inventory "$(hostname)", --connection local "$play_path"
+    dokku_col_log_info1_quiet "$play_path file found"
+    dokku_col_log_info1_quiet "$vault_file file found"
+    ansible-playbook \
+      --inventory "$(hostname)", \
+      --connection local \
+      --vault-password-file "$vault_file"
+      "$play_path"
+  else
+    dokku_col_log_info1_quiet "$play_path file found"
+    ansible-playbook \
+      --inventory "$(hostname)", \
+      --connection local \
+      "$play_path"
+  fi
 }

post-extract

@@ -10,7 +10,12 @@ dokku-ansible-playbook-post-extract() {
   dokku_col_log_info1_quiet "Checking for ansible playbooks supplied in repo"
   if [[ -d "$TMPDIR/ansible" ]] && [[ "$(ls -A "$TMPDIR/ansible")" ]]; then
     mkdir -p "$DOKKU_LIB_ROOT/data/ansible/$APP"
-    cp -r "$TMPDIR/ansible/." "$DOKKU_LIB_ROOT/data/ansible/$APP"
+    cp -r "$TMPDIR/ansible/*.yml" "$DOKKU_LIB_ROOT/data/ansible/$APP"
+    if [[ -f "$TMPDIR/ansible/.vault.sh" ]]; then
+      dokku_col_log_info1_quiet "Moving vault password file into place"
+      cp -r "$TMPDIR/ansible/.vault.sh" "$DOKKU_LIB_ROOT/data/ansible/$APP"
+      chmod 600 "$DOKKU_LIB_ROOT/data/ansible/$APP/.vault.sh"
+    fi
   fi
 }