4
What security measures did everyone use when configuring and can Ansible manage multiple installs? (lemmy.dbzer0.com)
submitted 7 months ago by to c/archlinux@lemmy.ml
10 comments fedilink hide all child comments
 

I have a basic firewall, but did not use App Armor, SELinux, or kernel blacklists. I definitely shut down port 22 just for now. It's just a laptop daily driver. Should I do more?

Also, I'm now addicted to Arch. I'm using Hyprland with it. This means I've got two bleeding edge wares and that gets rough sometimes when things break. I want Arch on my desktop gaming rig though. I tired other distros but I just love Arch. Has anyone tried using Ansible to manage multiple installations? I really can't maintain two so I was wondering if Ansible would make it easier, especially for updating.

you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 7 months ago (4 children)

Ansible is a little bit overkill for 2 systems, but it's worth learning since it's a valuable skill in today's job market

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] [S] 2 points 7 months ago (3 children)

    So I have a laptop (already configured with Arch), openwrt router, a Pi 5 for Jellyfin with Diet Pi, and a desktop. I want to put Arch with Hyperland on the desktop. It would be cool if I could just use Ansible to perform updates on the Arch Nodes at once. I also have trouble remembering configs and it causes me problems. I'd like to use my other Pi 3s with Arch for Immich, NextCloud ( I have a digital book library), Wikipedia, and etc if possible. Honestly the Pi 5 is not up yet so I could use Ansible for all. I wouldn't have put Diet Pi on there if I had previously thought about automating Arch with Ansible.

    Hell, I think I just talked myself into it.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 7 months ago (2 children)

    I also have trouble remembering configs and it causes me problems.

    ansible's strength comes in the form of infrastructure as code and managing armies of systems; it sounds like it'll atleast help with the first part since i rely on iac to help me learn and remember configs also.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •