diff --git a/ansible.cfg b/ansible.cfg
index 3a0fbf1..cb14a81 100644
--- a/ansible.cfg
+++ b/ansible.cfg
@@ -1,3 +1,4 @@
 [defaults]
+vault_password_file = get-vault-password.sh
 stdout_callback = yaml
 inventory = inventory.ini
diff --git a/get-vault-password.sh b/get-vault-password.sh
new file mode 100755
index 0000000..5bb7f04
--- /dev/null
+++ b/get-vault-password.sh
@@ -0,0 +1,3 @@
+#!/bin/sh
+
+pass show self/setup-cockpit-ansible-vault