Sometimes it's hard for me to believe we run everything on Docker and Ansible now. These things barely existed a few years ago, and here we are running full on production with them. Blew up indeed.

So yeah, I guess I'm seconding Ansible, and adding in Docker as well as many have done.

Is there any discussion about replacing Ansible + Docker with Nix? As someone looking to get into DevOps it seems like Docker solves the namespace/dependency-isolation problem, Ansible solves the reproducibility problem. Nix seems to solve both.

I haven't messed with nix, but I've used guix, which I think nix is a similar concept to. It's basically ansible on steroids, with every aspect of the system defined declaratively. Guix at least isn't quite "there yet", but it probably will be before too long...