Two-Layer Machine Provisioning with Pyinfra and Chezmoi

How I split machine setup into infrastructure provisioning and dotfile management, and why the separation makes everything easier