Update to 2022-04-05 18:00

roles/includes/get_rand_pass.yml

@@ -58,6 +58,7 @@
       args:
         stdin: "{{ rand_pass_new }}"
       register: rand_pass_enc
+      no_log: True
     - copy: content={{ rand_pass_enc.stdout | trim }} dest={{ pass_file }}.aes256{% if pass_openssl_pbkdf2.rc == 0 %}-pbkdf2{% endif %} mode=600
 
 # New pass generation but with encryption disabled, or the global rand_pass_encryption_key not defined
@@ -90,6 +91,7 @@
         stdin: "{{ rand_pass_enc_pbkdf2.content | b64decode | trim }}"
       register: rand_pass_dec_pbkdf2
       changed_when: False
+      no_log: True
 
     - set_fact: rand_pass_dec_pbkdf2={{ rand_pass_dec_pbkdf2.stdout | trim }}
 
@@ -112,6 +114,7 @@
         stdin: "{{ rand_pass_enc.content | b64decode | trim }}"
       register: rand_pass_dec
       changed_when: False
+      no_log: True
 
     - set_fact: rand_pass_dec={{ rand_pass_dec.stdout }}
 
@@ -136,6 +139,7 @@
       args:
         stdin: "{{ rand_pass_clear }}"
       register: rand_pass_reenc
+      no_log: True
 
     - name: Store the re encrypted password
       copy: content={{ rand_pass_reenc.stdout | trim }} dest={{ pass_file }}.aes256{% if pass_openssl_pbkdf2.rc == 0 %}-pbkdf2{% endif %} mode=600
@@ -157,6 +161,7 @@
       args:
         stdin: "{{ rand_pass_dec }}"
       register: rand_pass_reenc
+      no_log: True
 
     - name: Store the re encrypted password with PBKDF2
       copy: content={{ rand_pass_reenc.stdout | trim }} dest={{ pass_file }}.aes256-pbkdf2 mode=600