diff --git a/ansible/group_vars/all b/ansible/group_vars/all
index 51a889a699b39a511f202f93416092816b0137bb..5e303ae4a6400a03824eb7de725f1b7e0212a958 100644
--- a/ansible/group_vars/all
+++ b/ansible/group_vars/all
@@ -81,3 +81,8 @@
   findtime: 600
   bantime: 1200
   fail2ban_white_list: "127.0.0.1/8"
+
+# password auth
+  enable_password_auth: false
+  password_auth_bucket: "cheaha-misc-files"
+  password_auth_object: "password-auth-config.tar"