Ansible, git ops, actually testing it out. Backups with snapshots using restic, encrypted secrets using vault.