diff --git a/ansible/roles/gitlab_runner/tasks/main.yml b/ansible/roles/gitlab_runner/tasks/main.yml
index df82f02..d2f2a37 100644
--- a/ansible/roles/gitlab_runner/tasks/main.yml
+++ b/ansible/roles/gitlab_runner/tasks/main.yml
@@ -1,3 +1,6 @@
+- name: Include vault
+  include_vars: vault.yml
+
 - name: Install runner
   package:
     name: gitlab-runner
diff --git a/ansible/roles/gitlab_runner/vars/main.yml b/ansible/roles/gitlab_runner/vars/main.yml
index 83ee4e3..5e4d04c 100644
--- a/ansible/roles/gitlab_runner/vars/main.yml
+++ b/ansible/roles/gitlab_runner/vars/main.yml
@@ -1,7 +1 @@
-gitlab_runner_token: !vault |
-  $ANSIBLE_VAULT;1.1;AES256
-  65643664363337623138623538363032646330316263626632353233373832313235353939643465
-  3736633363663137653432306465626331653064303736310a313030646266316230396563313834
-  39366638646238303936633961343030623030633034653133376663656263333034373265313764
-  6637373531373262610a323037316336346339616563373933313436633337656634393535333235
-  36653337383864666137323331636136653338313133316265366337646465313533
+gitlab_runner_token: "{{ vault_gitlab_runner_token }}"
diff --git a/ansible/roles/gitlab_runner/vars/vault.yml b/ansible/roles/gitlab_runner/vars/vault.yml
new file mode 100644
index 0000000..43b42fe
--- /dev/null
+++ b/ansible/roles/gitlab_runner/vars/vault.yml
@@ -0,0 +1,8 @@
+$ANSIBLE_VAULT;1.1;AES256
+61313533333239316433623837616239346461393538356665363034663533343165366434316137
+3837376330386436656265356637343166643465616534390a666634323334383831306336613636
+36623630646235386661633266633533396664656464333561623036313865343036653734643132
+6333393739383764340a646361383961373434303936383131326364626439353262623965643564
+31343631656234666464383935306434383363316362666263323165613939663736326435313966
+35373466333937636633383138636434333765646235633630616539343464343237383236613739
+313038366164653662616461626661363832