--- # roles/app/defaults/main.yml # Host-side application configuration. Non-secret app config lives in # inventory/group_vars/all/main.yml; secrets live in the encrypted vault.yml app_env: production