title: Ansible global encrypted variable
body: <p>Suppose I have just one vault file, containing a bunch of variables I want to keep secret.  Is there a way to load the file in Ansible just once, and then globally accessible to all roles and all tasks?</p>
  
  <p>Basically I don't like to replicate var_files everywhere, like this:</p>
  
  <pre><code>- hosts: webserver
    var_files: encrypted.yml
    roles: ....
  
  - hosts: dbserver
    var_files: encrypted.yml
    roles: ....  
  </code></pre>