David Arnold

It is also currently rather difficult to install `nix` on aarch64-darwin (apple M1), specifically to get the store set up.

Looks like there can also be parametrization with: - https://www.nomadproject.io/docs/commands/job/dispatch

`computeOnXXX` that might come in handy once terraform needs to talk to remote APIs that are only accessible from within a deployment: eg. database engine seeding, rabbitMQ seeding, kv-store seeding

I'm on this one. As for the modules & related to #619 : - The entire hashicorp stack can consume `json` wherever `hcl` is accepted - Hence we can define...

And here is another gotcha, to manage `consul` (config) & `vault` (secrets) declarative, `nomad` does not have the same primitives as k8s. - app config & app secrets (k8s `ConfigMap`...

I'd say that if a gitops engineer deploys any state off of a gitignore file, that engineer is very deliberately shooting himself in the foot (or doesn't know better). I...

> I heard of someone once deploying a file with plain text secrets to a public docker container image. The file was gitignored so that person was not aware of...

Here is another shoulder of a giant: https://github.com/numtide/nix-filter

The last suggestion seems best! Great conceptualization, thanks! I was a bit struggling on this one and I figured this might be the point where users start asking for a...

Actually any language has the same problem: you can't paste them 1-by-1 on any dev's cli. That's probably the single biggest advantage with bash in this devops case...