Problem using variables in password fields of patroni.yml

Hello guys,

I’m having some trouble trying to not pass my passwords in plain text at the patroni.yml file. I’ve already deployed patroni successfully by filling the patroni.yml as the example (with plain-text passwords) and now I want to improve it… By passing this passwords as variables that will be filled in another file. Knowing ansible structure, I tried to put this variables in /etc/group_vars/all file but patroni doesn’t seem to find them.

Part of /etc/patroni.yml file:

authentication:
        replication:
            username: replicator
            password: "{{ replicator_pass }}"
        superuser:
            username: postgres
            password: "{{ postgres_pass }}"

Error in /var/log/messages:

Dec  2 19:41:35 postgresql01 patroni: 2018-12-02 19:41:35,810 INFO: Error communicating with PostgreSQL. Will try again later
Dec  2 19:41:37 postgresql01 patroni: 2018-12-02 19:41:37,265 ERROR: get_postgresql_status
Dec  2 19:41:37 postgresql01 patroni: Traceback (most recent call last):
Dec  2 19:41:37 postgresql01 patroni: File "/usr/lib/python2.7/site-packages/patroni/api.py", line 424, in get_postgresql_status
Dec  2 19:41:37 postgresql01 patroni: self.server.patroni.postgresql.lsn_name), retry=retry)[0]
Dec  2 19:41:37 postgresql01 patroni: File "/usr/lib/python2.7/site-packages/patroni/api.py", line 399, in query
Dec  2 19:41:37 postgresql01 patroni: return self.server.query(sql, *params)
Dec  2 19:41:37 postgresql01 patroni: File "/usr/lib/python2.7/site-packages/patroni/api.py", line 480, in query
Dec  2 19:41:37 postgresql01 patroni: raise PostgresConnectionException('connection problems')
Dec  2 19:41:37 postgresql01 patroni: PostgresConnectionException: 'connection problems'
Dec  2 19:41:40 postgresql01 patroni: 2018-12-02 19:41:40,274 ERROR: get_postgresql_status

/etc/systemd/system/patroni.service file:

[Unit]
Description=Runners to orchestrate a high-availability PostgreSQL
After=syslog.target network.target

[Service]
Type=simple

User=postgres
Group=postgres

ExecStart=/bin/patroni /etc/patroni.yml

KillMode=process

TimeoutSec=30

Restart=no

[Install]
WantedBy=multi-user.targ

Is passing variables supported by patroni code? Is there a specific place where I should put the variables file? If not, how is the recommended way to deploy patroni without the need of putting the passwords in plain-text?

Thank you!