Hacker News Reader

I can’t imagine using Ansible to configure a single server, seems like the wrong tool IMO.

Why not something like docker-compose and put all of the config bits into a single repo?

That way you can clone the repo on a new server and simply rebuild the containers.

How do you setup sshd or the ufw, or fail2ban... with Docker? I do see the point on running nginx and a Python apps using Docker, though.

How do you setup sshd with ansible? You need some form of access for initial provisioning, Ansible doesn't fix that either.

Sure, you can take that manually configured sshd and replace it with something managed by ansible _after_ the initial setup, but not before.