sysfig

sysfig Config management for people who own their machines. Track, encrypt, and audit system configs — without thinking about git. sysfig versions both dotfiles and root-owned /etc/ configs in a single bare git repo. Built-in age encryption, atomic deploys, offline-first, no symlinks. Install Debian / Ubuntu (.deb): RHEL / Fedora / Rocky (.rpm): Alpine (.apk): Binary (Linux / macOS): Replace linux-amd64 with linux-arm64, darwin-amd64, or darwin-arm64 as needed. Arch Linux (AUR): From source: 3 commands to get started 4 Ways to Use sysfig 1. Dotfiles only Track /.bashrc, /.config across laptops. No symlinks, no mess. 2. Solo sysadmin Manage /etc/nginx, /etc/ssh, systemd units across VPS servers. Preserves ownership, permissions, and auto-backs up before replacing. 3. Small team Share encrypted secrets and deploy configs to remote servers via SSH. Tag files by OS/distro so each host only receives what it needs. Run sysfig tag --auto to label every tracked file with its OS + distro family, then sysfig deploy --host user@vm --tag ubuntu --sudo to push only the matching configs. No agents on remote machines — only a POSIX shell needed on the target. 4. Remote server monitoring