# Ansible configuration for the autobott playbook repo.
#
# Enabling the community.sops vars plugin makes any *.sops.yaml under
# host_vars/<host>/ (or group_vars/) transparently decrypted and merged at
# runtime — no --vault-password-file plumbing needed. host_group_vars must
# stay listed so normal (plaintext) host/group vars keep loading.
#
# Decryption uses the age private key at $SOPS_AGE_KEY_FILE (exported by the
# Makefile, derived from the inventory in use).
[defaults]
vars_plugins_enabled = host_group_vars, community.sops.sops