Basically this is what configuration management does. So, why not use Ansible, esp. ansible pull ( https://docs.ansible.com/ansible/latest/cli/ansible-pull.html

Basically this is what configuration management does. So, why not use Ansible, esp. ansible pull ( https://docs.ansible.com/ansible/latest/cli/ansible-pull.html https://docs.ansible.com/ansible/latest/cli/ansible-pull.htm... ). You'd prepare an ansible playbook, and your users would pull that via git. Should tick most of your boxes. Incidentally, I'm currently working on a project/product to make that sort of thing easier, esp. in terms of flexibility and easy of use (for both end users and developers). It's not finished yet, but use-able. I haven't figured out how I do licensing yet, but I'd need some beta testers with real problems soon... Anyway, have a look at Ansible pull first, maybe it does what you need it to do. Ping me if you need some pointers. I also have a few scripts lying around that make bootstrapping that type of things easier.