diff --git a/host_vars/hostdebian b/host_vars/hostdebian/hostdebian
similarity index 55%
rename from host_vars/hostdebian
rename to host_vars/hostdebian/hostdebian
index 30b691e..2b0c10d 100644
--- a/host_vars/hostdebian
+++ b/host_vars/hostdebian/hostdebian
@@ -6,19 +6,17 @@ hostname: hostdebian
 ip_address: 192.168.2.109
 
 #
-# DISCLAMER: les mots de passe sont définis en clair à titre d'exemple.
-#            L'utilisation d'ansible Vault est largement recommendé dans ce type de cas.
-#            Ansible vault: http://docs.ansible.com/ansible/latest/vault.html
+# https://noskillbrain.fr/2017/10/27/ansible-vault/
 #
 mysql_user:
   noskillbrain1:
-    password: i0eFuprAYZQQ
+    password: "{{ vault_noskillbrain1_password }}"
     databases: 
        - noskillbrain1_db_1
     privs:
        - noskillbrain1_db_1.*:ALL
   noskillbrain2:
-    password: V17pPyOsUO6Q
+    password: "{{ vault_noskillbrain2_password }}"
     databases: 
        - noskillbrain2_db_1
        - noskillbrain2_db_2
diff --git a/host_vars/hostdebian/vault_hostdebian b/host_vars/hostdebian/vault_hostdebian
new file mode 100644
index 0000000..37e4214
--- /dev/null
+++ b/host_vars/hostdebian/vault_hostdebian
@@ -0,0 +1,10 @@
+$ANSIBLE_VAULT;1.1;AES256
+37316131326334396161343736343336663931363237623063386561663435663431343630376333
+6131376337616363316364383466393163356366303034320a306132616562346131383437613264
+37633365363661386138366162633633316537656364613465616535306639623330626631666538
+3731383230353262650a326665383635613532653766373435396636613965383334386437613262
+37376265386238656561626362316338663863363335323533613363373366623263636565356133
+30623264626130343032383338643065303663373861623834386337343433653139363463636164
+37323262326263636133356664646430383162383862623666333330303630333661663136396334
+63313037663261393665313630663866326530623930303336666662363363336431313035663735
+6134