set password for user

roles/base/tasks/users/rene.yml

@@ -1,9 +1,12 @@
+- include_vars: 'users.yml'
+
 - name: users | rene | ensure account is locked
   user:
     name: rene
     shell: "/usr/bin/zsh"
     groups: "sudo"
     append: True
+    password: "{{ rene_passwd | password_hash('sha256') }}"
 
 # - name: users | rene | install public ssh keys
 #   authorized_key:

roles/base/vars/main.yml

@@ -1,2 +1 @@
-rene_password:
 root_home: "{{ lookup('env','HOME') }}"

roles/base/vars/users.yml

@@ -0,0 +1,6 @@
+$ANSIBLE_VAULT;1.1;AES256
+65646630353833633230363131363462653336636133613338363230323636333133386431346639
+6333613934316432646430663737336462356437663536660a333837333865626262343637636330
+61343133383034396563623931643735366133363261376437373138306464323733326334393734
+3733633431363531320a626638643233306631313631333639656131656136383931653562663937
+30333539646265653161396639633939623435623935373138373663313837313461