Extract vault items from host vars

ansible/host_vars/grimes/main.yml

@@ -0,0 +1,31 @@
+ssh_extra_allowed_users: dokku
+
+dokku_daemon_install: false
+dokku_hostname: d.theorangeone.net
+dokku_plugins:
+  - name: postgres
+    url: https://github.com/dokku/dokku-postgres.git
+
+  - name: redis
+    url: https://github.com/dokku/dokku-redis.git
+
+  - name: letsencrypt
+    url: https://github.com/dokku/dokku-letsencrypt.git
+
+  - name: redirect
+    url: https://github.com/dokku/dokku-redirect.git
+
+  - name: http-auth
+    url: https://github.com/dokku/dokku-http-auth.git
+
+# https://dokku.com/docs/advanced-usage/backup-recovery/
+restic_backup_locations:
+  - /home/dokku
+  - /var/lib/dokku/config
+  - /var/lib/dokku/data
+  - /var/lib/dokku/services
+
+restic_backup_excludes:
+  - /home/dokku/**/cache  # Caches are big, don't need those
+
+restic_healthchecks_id: "{{ vault_restic_healthchecks_id }}"

ansible/host_vars/grimes/vault.yml

@@ -0,0 +1,9 @@
+$ANSIBLE_VAULT;1.1;AES256
+61636635633634366161363765363961396430313436353337616466653964373464633236663631
+3066653963336137343065343631623730653536343934660a666662306464313738636163316131
+66386565303630376663643330396630303832323839366164303061303331636362306236396131
+3136326432323939380a373764616161623333343834623566663139396139323561323463376330
+39386531373266353063316566366636363538663865373638643736366135373937313030373630
+36303166643533653038323466353230383464353130323233333838656432343931643035663535
+66383332363762353832316535663234373066386662656135343564353363303232613766313563
+32336561313639366461