# Transparently Encrypt Select Files within a Git Repository

**URL:** <https://forum.ansible.com/t/transparently-encrypt-select-files-within-a-git-repository/14567>\
**Category:** Ansible Project\
**Created:** [February 14, 2014, 3:44pm UTC](https://forum.ansible.com/t/transparently-encrypt-select-files-within-a-git-repository/14567 "2014-02-14T15:44:02Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Aaron\_Bull\_Schaefer](https://avatars.discourse-cdn.com/v4/letter/a/85f322/32.png) [@Aaron\_Bull\_Schaefer](https://forum.ansible.com/u/Aaron_Bull_Schaefer)\
**Post date:** [February 14, 2014, 3:44pm UTC](https://forum.ansible.com/t/transparently-encrypt-select-files-within-a-git-repository/14567/1 "2014-02-14T15:44:02Z")

</div>

Since the discussion for a built-in "vault" feature seems to have died  
down, I started looking into alternatives for managing sensitive  
information (like passwords and private keys) for use with my Ansible  
playbooks. I found a couple of projects to store encrypted files in a  
Git repository directly (encrypt on commit, decrypt on checkout), but  
I wasn't happy with the implementation of those projects.

I thought the idea was sound, so I ended up writing transcrypt [1] to  
be a bit more usable and safe compared to the alternatives. I thought  
other people on this list might find it useful.

[1] [https://github.com/elasticdog/transcrypt](https://github.com/elasticdog/transcrypt)

---

<div class="post-metadata">

**Author:** ![sivel](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/sivel/32/1198_2.png) [@sivel](https://forum.ansible.com/u/sivel)\
**Post date:** [February 14, 2014, 5:23pm UTC](https://forum.ansible.com/t/transparently-encrypt-select-files-within-a-git-repository/14567/2 "2014-02-14T17:23:52Z")

</div>

Although the discussion has died down, work towards making it a reality has not.

vault is projected for inclusion in the 1.5 release (afaik), which we should see within a month or so.

---

<div class="post-metadata">

**Author:** ![Michael\_DeHaan1](https://avatars.discourse-cdn.com/v4/letter/m/5e9695/32.png) [@Michael\_DeHaan1](https://forum.ansible.com/u/Michael_DeHaan1)\
**Post date:** [February 14, 2014, 6:00pm UTC](https://forum.ansible.com/t/transparently-encrypt-select-files-within-a-git-repository/14567/3 "2014-02-14T18:00:15Z")

</div>

vault is in active development now, we should be able to share something on the githubs early next week.