linux4noobs

1340 readers

1 users here now

linux4noobs

Noob Friendly, Expert Enabling

Whether you're a seasoned pro or the noobiest of noobs, you've found the right place for Linux support and information. With a dedication to supporting free and open source software, this community aims to ensure Linux fits your needs and works for you. From troubleshooting to tutorials, practical tips, news and more, all aspects of Linux are warmly welcomed. Join a community of like-minded enthusiasts and professionals driving Linux's ongoing evolution.

Seeking Support?

Mention your Linux distro and relevant system details.
Describe what you've tried so far.
Share your solution even if you found it yourself.
Do not delete your post. This allows other people to see possible solutions if they have a similar problem.
Properly format any scripts, code, logs, or error messages.
Be mindful to omit any sensitive information such as usernames, passwords, IP addresses, etc.

Community Rules

Keep discussions respectful and amiable. This community is a space where individuals may freely inquire, exchange thoughts, express viewpoints, and extend help without encountering belittlement. We were all a noob at one point. Differing opinions and ideas is a normal part of discourse, but it must remain civil. Offenders will be warned and/or removed.
Posts must be Linux oriented
Spam or affiliate links will not be tolerated.

founded 1 year ago

MODERATORS

PlutoParty@programming.dev

Editing config files safely (lemmy.world)

submitted 1 year ago by ace_garp@lemmy.world to c/linux4noobs@programming.dev

12 comments fedilink hide all child comments

You can backup your config files before editing them, like this:

cp configbeingedited.conf configbeingedited.conf__orig_datestring

This way, when things break or don't function how you like, you can easily copy the original config file back into position, restoring the original functionality.

you are viewing a single comment's thread
view the rest of the comments

[–] astral_avocado@programming.dev 5 points 1 year ago (1 children)

I generally keep my config files stored in the GitHub repo for version control, and then actual secrets are pulled dynamically from a secret store.

[–] lambda@programming.dev 1 points 1 year ago (1 children)

Secret store? Mind sharing links on what that means? I assume it's something you can self host?

[–] astral_avocado@programming.dev 1 points 1 year ago (1 children)

Specifically AWS secrets manager, I know there's others like if you're using Ansible there's Ansible Vault. The point is that it's a separate service that keeps all your secrets encrypted at rest and to access them you need an initial authentication.

[–] zlatko@programming.dev 3 points 1 year ago (1 children)

I've been meaning to get the ansible thing. Not for my home computers, my dotfiles are on GitHub, SSH keys offline, stuff backed up. But I always think that if my poor hetzner box dies, I'll have a lot of fun getting it all back up :/

[–] astral_avocado@programming.dev 2 points 1 year ago (1 children)

😂 Honestly Ansible can be a little obtuse at times, I'm having a much better time with having all my stuff defined in Docker and deployed via docker-compose or Terraform for non-self-hosted stuff. Ansible can be a lot of effort but I can also see it being better in the long run.

Then there's the NixOS people.. people swear by that. I haven't dived into that whole world yet.

[–] zlatko@programming.dev 2 points 1 year ago

Yeah NixOS is my other alternative, but I think that rabbit hole is much more deep than the Ansible one :)

I also manage my few self-hosted things and play-things with docker-compose on my box, but who manages docker-compose files? :) And nginx config, and network-related stuff etc etc. I am too lazy but I guess I will have to bite the bullet and after 20 years of manually doing it all and backing up raw and praying, actually figuring out the next level.