> And then this is the more hands on version, which I guess would be sovereign as ansible deployment. I used to run a Sovereign box. It served me well for 2-3

> And then this is the more hands on version, which I guess would be sovereign as ansible deployment. I used to run a Sovereign box. It served me well for 2-3 years, but it got too cumbersome to maintain: they changed their approach to various configuation things (for the better, I'm sure), and threatened to break my setup in the process. All told, it felt like it had missed the sweet spot between pre-configuration and flexibility, in the end not quite giving you either. > IMHO sovereign puts too many attack vectors on a single machine. I turned off most of the attack vectors (I didn't need all the bells and whistles). But yes, they tried too hard, and over-complicated the setup as a result.