ensure no passwords are logged

mediawiki/tasks/postgres.yml

@@ -22,6 +22,7 @@
     name: "{{ mediawiki_dbuser }}"
     password: "{{ mediawiki_dbpassword }}"
     state: present
+  no_log: True
   become: yes
   become_user: postgres
   tags:

uwsgi-python/tasks/main.yml

@@ -62,6 +62,7 @@
   local_action: pass name="db/{{ansible_hostname}}-mysql" state=present generate=20 store=FSMPI_PASSWORD_STORE_DIR limit=yes
   register: mysql_password
   when: uwsgi_db == "mysql"
+  no_log: True
   tags:
     - config
     - uwsgi-python
@@ -75,6 +76,7 @@
     login_user: root
     login_password: "{{mysql_password.password}}"
   when: uwsgi_db == "mysql"
+  no_log: True
   tags:
     - config
     - mysql
@@ -84,6 +86,7 @@
   local_action: pass name="db/{{ansible_hostname}}-mysql-{{uwsgi_user}}" state=present generate=20 store=FSMPI_PASSWORD_STORE_DIR limit=yes
   register: mysql_user_password
   when: uwsgi_db == "mysql"
+  no_log: True
   tags:
     - config
     - uwsgi-python
@@ -99,6 +102,7 @@
     login_password: "{{mysql_password.password}}"
     priv: "{{uwsgi_name}}.*:ALL"
   when: uwsgi_db == "mysql"
+  no_log: True
   tags:
     - config
     - mysql

wordpress/tasks/mysql.yml

@@ -12,6 +12,7 @@
   local_action: pass name="db/{{ wordpress_dbhost }}-{{ wordpress_dbtype }}" state=present generate=20 store=FSMPI_PASSWORD_STORE_DIR limit=yes
   #local_action: "pass store=FSMPI_PASSWORD_STORE_DIR name=db/{{ wordpress_dbhost }}-{{ wordpress_dbtype }} limit=True"
   register: wordpress_db_login_password
+  no_log: True
   tags:
     - config
     - password
@@ -24,6 +25,7 @@
     state: present
     login_user: root
     login_password: "{{ wordpress_db_login_password.password }}"
+  no_log: True
   tags:
     - mysql
     - config
@@ -37,6 +39,7 @@
     login_user: root
     login_password: "{{ wordpress_db_login_password.password }}"
     priv: "{{ wordpress_dbname }}.*:ALL"
+  no_log: True
   tags:
     - mysql
     - config