General Ansible Advice
Use environment based playbooks & inventory files for clear
separation & to easily handle one off differences
Use Python or some other environment variable system for
managing your secrets!
Couple variables to the most focused point, then raise their scope
as you need