Infrastructure as Code (Terraform, CloudFormation)
Every resource defined in code, reviewed in a pull request and applied by a pipeline.
Read moreDevOps & Engineering
Configuration Management
Servers that are consistent, patched and rebuildable from source control rather than from memory.
Overview
Long-lived servers drift. Someone applies an urgent fix, someone else edits a config file during an incident, and within a year no two machines are quite alike. The result is an environment where nobody is confident that staging predicts production.
We bring configuration under version control using Ansible, cloud-init and image pipelines, favouring immutable images where the workload allows and managed configuration where it does not.
What you get
Consistent by construction
Every machine built from the same definition, so environments genuinely match.
Patching that happens
A scheduled, automated process with a tested rollback, rather than an annual scramble.
Rebuildable
Any server can be recreated from source control, which is also a meaningful part of your recovery plan.
Secrets separated
Configuration in Git, credentials in a secret store, never mixed together.
How we work
- 01
Inventory
Existing servers, their roles and their accumulated differences are catalogued honestly.
- 02
Codify
Roles and playbooks written for each server type, tested against a disposable environment.
- 03
Converge
Existing machines brought to the defined state in stages, or replaced with rebuilt images.
- 04
Maintain
Scheduled runs, drift reporting and a patch cadence agreed with the business.
Common questions
Ansible or immutable images?
Images where the workload tolerates replacement, since a rebuilt machine cannot drift. Ansible for stateful or legacy servers that must be maintained in place.
We have servers nobody understands. Can you help?
Yes. That is the normal starting point. We document what a server does before changing how it is built.
Does this replace infrastructure as code?
No, it complements it. Terraform provisions the machine; configuration management determines what runs on it.
Often paired with
24/7 Managed IT Support
Ongoing support for your cloud and platform environment, with defined response times and a monthly written report.
Read moreVulnerability Assessment
Continuous scanning across infrastructure, containers and dependencies — with triage so the list stays actionable.
Read moreReady to talk about configuration management?
We will tell you what we would do, roughly what it costs, and whether it is worth doing yet.