Only pass vault pass when deploying

This makes linting much simpler

.gitea/workflows/ci.yml

@@ -28,7 +28,5 @@ jobs:
 
       - name: Set up
         run: ./scripts/ansible/setup.sh
-      - name: Pretend executable is vault password
-        run: chmod -x ansible/vault-pass.sh
       - name: Lint
         run: ./scripts/ansible/lint.sh

ansible/ansible.cfg

@@ -7,7 +7,6 @@ collections_path = $PWD/galaxy_collections
 inventory = ./hosts
 become_ask_pass = True
 interpreter_python = auto_silent
-vault_password_file = ./vault-pass.sh
 
 [ssh_connection]
 pipelining = True

scripts/ansible/deploy.sh

@@ -4,4 +4,4 @@ set -ex
 
 cd ansible/
 
-time ansible-playbook main.yml -K $@
+time ansible-playbook main.yml --vault-password-file=vault-pass.sh -K $@