# tasks/common.yml
[…]
- name: Ensure the Environment Variables file is in place
  template:
    src: ../templates/.env.j2
    dest: "{{ work_dir }}/.env"
    owner: "{{ ansible_user }}"
    group: "{{ ansible_user }}"
    mode: "0644"
  tags:
    - docker
    - schedule
    - acs
    - ays
[…]


# templates/.env.j2
DB_ACSAYS_DATABASE="{{ db_acsays_database }}"
DB_SCHEDULE_DATABASE="{{ db_schedule_database }}"
DB_USERNAME="{{ db_username }}"
DB_PASSWORD="{{ db_password }}"


# group_vars/all/vars.yml
---
# Database vars
db_acsays_database: "{{ vault_db_acsays_database }}"
db_schedule_database: "{{ vault_db_schedule_database }}"
db_username: "{{ vault_db_username }}"
db_password: "{{ vault_db_password }}"
[…]


# group_vars/all/vault.yml
---
vault_db_acsays_database: <nope>
vault_db_schedule_database: <nope>
vault_db_username: <nope>
vault_db_password: <nope>