The ansible-vault command allows file encryption, and requires a password to unencrypt.
Ansible Vault
Ansible Galaxy
Ansible Galaxy is essentially a large public repository of Ansible roles. Roles ship with readmes detailing role use and available variables. Galaxy contains a large number of roles that are constantly evolving and increasing. Galaxy can use git allowing for other role sources such as GitHub.
Ansible roles
When dealing with extensive playbooks, it is easier to split the tasks into roles. This also helps in reusing the roles in the future. Roles are a collection of tasks, which can be moved from one playbook to another, can be run independently but only through a playbook file. In other words, roles are a feature of Ansible that facilitate reuse and further promote modularization of configuration.
Ansible Variable and Facts
Ansible Templates
Templates give the ability to provide a skeletal file that can be dynamically completed using variables