Haha, yeah, that’s a good point. I may still have some ansible playbook from a while ago but I’m pretty sure it wouldn’t be up to date. I guess it would be nice to have a system like CoreOS was, where you just provide a setup script, systemd unit files, and at runtime most of the file system is expected to be read-only. That way you’re confident you keep all your setup in a git repo and on reboot the whole thing is reset (outside of data stores).

It’s just so tempting to quickly ssh into the machine to hack something around, then you forget about it b cause it ~works.

But a rpi4 can run containers, so that may also be an alternative.