Publish playbook for production

[php-coder]

Let's commit infra/vagrant/provisioning/prod.* files to Git and use https://git-secret.io or https://github.com/AGWA/git-crypt in order to encrypt sensitive data.

Idea from @asm0dey

[php-coder]

vars section should be replaced by vars_files. The external file can be encrypted then.

[php-coder]

Could be related: https://www.toptechskills.com/ansible-tutorials-courses/ansible-include-import-variables-tutorial-examples/

[php-coder]

The external file can be encrypted then.

Perhaps, we can try ansible-vault: #435

[php-coder]

• don't forget to scan it with ansible-lint (see Build scripts: add checking by ansible-lint #479)

[php-coder]

Need to find a way to commit prod.inventory file as well.