From 5b08e088e027cfba25c1d0edee175c87dae16c45 Mon Sep 17 00:00:00 2001
From: Sarah Chen <schen@galionsystems.com>
Date: Fri, 28 Aug 2026 19:28:57 -0500
Subject: [PATCH] use ansible-vault for aws credentials (replaces prod.env)

---
 deploy/roles/galion_monitor/tasks/main.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/deploy/roles/galion_monitor/tasks/main.yml b/deploy/roles/galion_monitor/tasks/main.yml
index ab935d5..d5e5f8e 100644
--- a/deploy/roles/galion_monitor/tasks/main.yml
+++ b/deploy/roles/galion_monitor/tasks/main.yml
@@ -14,3 +14,9 @@
   pip:
     name: galion-modbus-exporter
     state: present
+
+- name: Configure AWS credentials from vault
+  template:
+    src: aws_credentials.j2
+    dest: /home/galion/.aws/credentials
+    mode: '0600'