aur repo host secret lookup

ansible/inventory/group_vars/aur_repo_hosts/aur_repo_host.yml

@@ -1 +1,26 @@
-# code: language=ansible
+# code: language=ansible
+
+aur_repo_packager_name: "Balsillie Family"
+aur_repo_packager_email: "admin@balsillie.net"
+aur_repo_dir: "/aur"
+
+aur_repo_build_account: "aur-builder"
+
+aur_repo_host_packages:
+  - pikaur
+  - jellyfin-media-player
+  - git-credential-keepassxc
+  - docker-credential-secretservice-bin
+  - ventoy-bin
+  - debtap
+  - aurutils
+  - ipmiview
+  - protonvpn
+  - protonmail-bridge
+  - powershell-bin
+  - azure-cli-bin
+  - visual-studio-code-bin
+  - ttf-ms-fonts
+  - brave-bin
+  - teamviewer
+  - vmware-horizon-client

ansible/inventory/host_vars/dev.balsillie.house/aur_repo_host.yaml

@@ -1,46 +0,0 @@
-# code: language=ansible
-
-aur_repo_packager_name: "Balsillie Family"
-aur_repo_packager_email: "admin@balsillie.net"
-aur_repo_dir: "/aur"
-
-aur_repo_build_account: "aur-builder"
-
-aur_repo_host_packages:
-  # - kodi-addon-game-libretro-desmume # Nintendo DS
-  # - kodi-addon-game-libretro-gambatte # Gameboy / Gameboy Colour
-  # - kodi-addon-game-libretro-mgba # Gameboy Advance
-  # - kodi-addon-game-libretro-nestopia # Nintendo
-  # - kodi-addon-game-libretro-scummvm # ScummVM
-  # - kodi-addon-game-libretro-snes9x # Super Nintendo
-  # - kodi-addon-game-libretro-parallel-n64 # Nintendo 64
-  # - kodi-addon-vfs-sftp
-  # - kodi-standalone-service
-  # - proton-ge-custom-bin
-  - pikaur
-  # - sonarr
-  # - radarr
-  # - lidarr
-  # - prowlarr
-  # - bazarr
-  - jellyfin-media-player
-  # - moonlight-qt-bin
-  - git-credential-keepassxc
-  - docker-credential-secretservice-bin
-  # - obs-backgroundremoval
-  - ventoy-bin
-  - debtap
-  - aurutils
-  # - kdocker
-  - ipmiview
-  - protonvpn
-  - protonmail-bridge
-  - powershell-bin
-  - azure-cli-bin
-  # - microsoft-edge-stable-bin
-  # - teams-for-linux-bin
-  - visual-studio-code-bin
-  - ttf-ms-fonts
-  - brave-bin
-  - teamviewer
-  - vmware-horizon-client

ansible/roles/aur_repo_host/tasks/main.yaml

@@ -1,5 +1,15 @@
 ---
 
+- name: Lookup aur_repo_host secret
+  community.hashi_vault.vault_kv1_get:
+    path: ansible/group_vars/aur_repo_hosts
+  register: aur_repo_host_secret
+
+- name: Set aur_repo facts
+  ansible.builtin.set_fact:
+    aur_repo_private_key: "{{ aur_repo_host_secret.secret.aur_repo_private_key }}"
+    aur_repo_key_thumbprint: "{{ aur_repo_host_secret.secret.aur_repo_key_thumbprint }}"
+
 - name: Create the makepkg drop-in config file
   ansible.builtin.template:
     dest: /etc/makepkg.conf.d/makepkg.conf