If you want to store secrets that by default shouldn't be automatically
exposed to hosts and groups as variables please put the vault files into
-`secrets` directory and should be name <some-name>.vault.yml.
+`secrets` directory and name them <some-name>.vault.yml.
r3 NOC uses [ansible-vault-tools](https://github.com/building5/ansible-vault-tools)
to manage/diff/merge changes in vaults.
==================
All secrets are stored inside encrypted ansible vault files which live in
-`host-vars`, `group_vars` or inside the secrets directory.
+`host_vars`, `group_vars` or inside the `secrets` directory.
Access to the vault files is controlled via GPG keys. Anybody who uses this
ansible repository needs to have a GPG key.