Extract vault items from host vars

ansible/host_vars/pve/main.yml

@@ -0,0 +1,46 @@
+private_ip: "{{ pve_hosts.pve.ip }}"
+
+zpools_to_scrub:
+  - tank
+  - rpool
+
+# 7GB, or so
+zfs_arc_size: 7000000000
+
+sanoid_datasets:
+  tank:
+    use_template: production
+    recursive: true
+    process_children_only: true
+
+  rpool:
+    use_template: production
+    recursive: true
+
+# Snapraid
+snapraid_install: false
+snapraid_runner: false
+
+snapraid_data_disks:
+  - path: /mnt/bulk
+    content: true
+snapraid_parity_disks:
+  - path: /mnt/parity
+    content: true
+
+snapraid_content_files:
+  - /mnt/tank/files/snapraid.content
+  - /var/snapraid.content
+
+snapraid_config_excludes:
+  - "*.unrecoverable"
+  - /lost+found/
+  - "*.!sync"
+  - /tmp/
+
+snapraid_scrub_schedule:
+  hour: 5
+  weekday: 4
+
+snapraid_scrub_healthcheck_io_uuid: "{{ vault_snapraid_scrub_healthcheck_io_uuid }}"
+snapraid_sync_healthcheck_io_uuid: "{{ vault_snapraid_sync_healthcheck_io_uuid }}"

ansible/host_vars/pve/vault.yml

@@ -0,0 +1,13 @@
+$ANSIBLE_VAULT;1.1;AES256
+35373139393931313861616335663835396132626632363635316430306539666631393230323539
+3830333131633532343962376562663463656235333137340a343536626237306465646661656566
+32346535633838386137383238336130663639633266366137353739633062313730333963626462
+3436633035396461630a313433343330303434396665313536656462306166623636633731353937
+33366265383932343231386438633432623263316363623032356662393538346234326238333130
+64326434393165653134386631636165303836323763636532303562326238366638333063636135
+33303866383934393961363933316433623637656264333531623034383337343231323361383363
+63623264626537363832623662313533326230326665363161643931306338363831343566353839
+39363562366430383461396232653531626131386234643731643463616563363334636365353934
+66643561326566613364653363313763356662623066326232653938373135313561386636313264
+31633938363863633866336435396239346266343662356231376161363763666332306330393337
+64373933396136386366