diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..45f5c61
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+vault_passwd
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..b53bb09
--- /dev/null
+++ b/README.md
@@ -0,0 +1,4 @@
+## Gestion du mot de passe principal ansible-vault
+
+ * Demander-le via mattermost à Antoine ou Samuel de Néréide.
+ * Puis copier le dans le fichier vault_passwd à la racine du projet `echo "motdepassevault" > vault_passwd`
diff --git a/ansible.cfg b/ansible.cfg
new file mode 100644
index 0000000..9fce710
--- /dev/null
+++ b/ansible.cfg
@@ -0,0 +1,2 @@
+[defaults]
+vault_password_file = vault_passwd
diff --git a/group_vars/all b/group_vars/all/vars
similarity index 100%
rename from group_vars/all
rename to group_vars/all/vars
diff --git a/group_vars/all/vault b/group_vars/all/vault
new file mode 100644
index 0000000..06c05b4
--- /dev/null
+++ b/group_vars/all/vault
@@ -0,0 +1,19 @@
+$ANSIBLE_VAULT;1.1;AES256
+30313131626662343730326264376636313733356163633234333166313461626464306139663664
+3862353032373664326135313361616537313037356261640a646335363631303139623962336666
+65323365633437653666343132343965383732376335633833333235373237383533363764643737
+6130346135633637350a643364626532306535663363376239353537613532303862386231393631
+62363232303237643639333730346463623834626339333566623434396638303234323631643337
+36373362656233356532386234613764373539356232323935623636633938333135343963366236
+62383365346232663865333837636135646462613136353734333434313537316437363638373430
+64656433386366376361653363656631623363393034323239653135653963366263363562633535
+34663863643436313266363763396339346634343731333035663635643335656366636562636135
+64616536326165326263386431363662336234653430333531663539343733353239353062303430
+37643830343430616265623361363332646665326134366166353666633164363732656635323562
+37313130363832356431633862333233353632633161396535663463633565356435363663663431
+32613162356632666139373033613036316666366134376561643865323730373939333964613231
+33326332366438663865363437366363343335336431616161393530323066623538656662383832
+64623430653530356433386538343761363964373365343435353862656166653731363833663062
+33386263623834326166303161316466303530653935623533393064653562656230376439613862
+36336439383565343731646134646132373035326234613833623863646230313164346464663036
+6633623162396638356235393837646261626337343861626434
diff --git a/roles/jitsi-enable-stats/templates/telegraf-general-cl.conf.j2 b/roles/jitsi-enable-stats/templates/telegraf-general-cl.conf.j2
index 340e966..5f869ce 100644
--- a/roles/jitsi-enable-stats/templates/telegraf-general-cl.conf.j2
+++ b/roles/jitsi-enable-stats/templates/telegraf-general-cl.conf.j2
@@ -23,7 +23,7 @@
 [[outputs.influxdb]]
     urls = [ "https://influxdb.gra1.metrics.ovh.net" ]
     username = "metrics"
-    password = "XJ38hW_X9tZXE83rad_wssvkvzXaDC1j2ynLfawIpMANngDGjDWeRqjytKFncgYP.MtlT6t8dDy5K12aGL.OIPCvkjDSje8KOoGVNTqpHnDzDDKZ.K_AV8nEjzivC0ka"
+    password = "{{ vault_telegraf_cl_passwd }}"
 
 ###############################################################################
 #                                  INPUTS                                     #
diff --git a/roles/jitsi-enable-stats/templates/telegraf-general-nrd.conf.j2 b/roles/jitsi-enable-stats/templates/telegraf-general-nrd.conf.j2
index c784c33..cf40607 100644
--- a/roles/jitsi-enable-stats/templates/telegraf-general-nrd.conf.j2
+++ b/roles/jitsi-enable-stats/templates/telegraf-general-nrd.conf.j2
@@ -23,7 +23,7 @@
 [[outputs.influxdb]]
     urls = [ "https://influxdb.nereide.fr" ]
     username = "telegraf"
-    password = "8qejQkRyNfc5DFUZaPn5QTh3S"
+    password = "{{ vault_telegraf_nrd_passwd }}"
 
 ###############################################################################
 #                                  INPUTS                                     #