playbook.yml

---
- hosts: localhost
  user: root

  vars_files:
    - vars.yml

  pre_tasks:
    - include_vars: secrets.yml
      ignore_errors: yes
      tags:
        - always

  roles:
    - facts
    - secrets
    - nodejs

requirements.yml

- src: https://github.com/idi-ops/ansible-facts
  name: facts

- src: https://github.com/avtar/ansible-secrets
  name: secrets

- src: https://github.com/avtar/ansible-nodejs
  version: remotes/origin/secret-env-vars
  name: nodejs