- hosts: all vars_files: - 'vars/vault.yml' become: true roles: - base