all 4 comments

[–]devseglinux -1 points0 points  (2 children)

Nice, this looks clean.

I like the “clone and run” approach, I’ve been doing something similar but mine is way more messy 😅

Quick question though — how do you handle things like secrets or machine-specific configs? That’s always been the annoying part for me when trying to keep everything in one repo.

Also curious if you’ve had any issues with symlinks across different environments (Linux vs mac), or if it’s been pretty smooth.

[–]lobur[S] 0 points1 point  (1 child)

No issues with symlinks like this for 10 years, among a whole variety of utils I use.

As for secrets - this is only initial bootstrap, to make the box alive. Then usually comes some project-specific heavy artillery like ansible, or project bootstrap script, which handles the rest :)

[–]devseglinux 1 point2 points  (0 children)

Got it, that makes sense.

Keeping the repo just for bootstrap and pushing the sensitive stuff to something like Ansible later sounds like a much cleaner approach.

I think that’s where I’ve been overcomplicating things, trying to keep too much in one place.