diff --git a/.gitignore b/.gitignore
index c18dd8d..5aba8ef 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,4 @@
 __pycache__/
+
+# ansible vault password
+.vault_pass
diff --git a/ansible.cfg b/ansible.cfg
index 5d5f478..698a0af 100644
--- a/ansible.cfg
+++ b/ansible.cfg
@@ -1,5 +1,6 @@
 [defaults]
 inventory = hosts
+vault_password_file = .vault_pass
 
 [connection]
 pipelining = True