Ansible-vault

Wie nutze ich "ansible-vault" um Klartext Passwörter zu verschlüsseln? 

Verschlüsselung eines "Strings" !!

ansible-vault encrypt_string '1234567890' --name 'db_password'
New Vault password:
Confirm New Vault password:
db_password: !vault |
          $ANSIBLE_VAULT;1.1;AES256
          66383965326665303636336236663433656138373330333039396538353930623362393566636162
          6634646161623364373937383332626264376535323732640a353364303130313630376366653433
          65656633386530363939363838656638656463353166393239343764646239643532333931333230
          3734646439623463350a336330326339353965383632373431623261636533623162366137316465
          3562
Encryption successful

Entschlüsseln des Ansible Vault 

echo '$ANSIBLE_VAULT;1.1;AES256
> 66383965326665303636336236663433656138373330333039396538353930623362393566636162
> 6634646161623364373937383332626264376535323732640a353364303130313630376366653433
> 65656633386530363939363838656638656463353166393239343764646239643532333931333230
> 3734646439623463350a336330326339353965383632373431623261636533623162366137316465
> 3562' | ansible-vault decrypt