Post

I am thinking about moving from nixops to OpenTofu + Ansible, I'm not familiar enough with either of them to know if it'll be able to fully replace it for me, but we'll see. Would be nice to be able to do update/patch management centrally via thaat system as well, mmm... Dunno!

I have a horrible tangled mess of nix files to describe my infra right now, but it's nice that all the common config stuff is in one spot, and then each part of the system knows how to set itself up based on that (e.g. email, dns, web)

and it's all done on a per-user basis so it's easy for me to spin up web/email/dns/db for a friend just by stamping out a new nix file with the details and it all just works:tm: I would like to have something like that still, but just not have to suffer with nix, lol...

migrating DKIM keys is likely going to be a huge pain in the ass, ugh. But, I might play with seeing if I can hack something up with OpenTofu + Ansible, I would also like to be able to collect system telemetry, but i'm not sure what would be best for that.

Maybe OpenTelemetry would fit the bill for that last bit? I really just want to roughly keep track of service health, system cpu/mem/disk usage, and patch/update status. And then get notifications for alerts.

I'll have to play with it in a synthetic local environment to see if I can build up things how I want them, then see about possible migration

I'm not in sysops, so I have no idea what i'm doing here, i'm just a smooth brained catgirl, so we'll see.