Then yes, learning Ansible is a good way to have base OS settings for your systems. I love that it’s agentless - works over SSH.

The ugly part is that they keep updating it in a backwards incompatible way. In one version the paramerer is called “file” and in another it’s “dest”, they pull shit like this and don’t provide a tool to update playbooks automatically.

But updating is rather optional.