Hi,
We previously used a dedicated Ansible controller host to manage our
infrastructure here at CipherMail. Our Ansible inventory was shared with
all members of the 'admins' group with some ACL and setgid trickery.
This worked, kinda, but did eventually cause some permission problems.
Another downside was that we couldn't easily collaborate this way, as
every change had to be made centrally on the Ansible controller.
We now run the playbooks from our workstations, storing our secrets in
Git as well. These secrets are encrypted with encfs using the
debops-padlock script. This works well on Debian 10 and Ubuntu 18.04
(thanks Hartmut!), even so that we don't use the Ansible controller anymore.
There's just one problem: the encfs paths and filenames are stored in
encrypted form in Git, which makes merge conflicts a lot harder to
solve. I've been looking for ways to disable this but can't find
anything in the encfs manual (or anywhere for that matter). So, my
question is: does anyone know how to disable this?
Thanks!
Imre