{"id":1082,"date":"2025-05-22T12:09:02","date_gmt":"2025-05-22T10:09:02","guid":{"rendered":"https:\/\/chrisengelhard.nl\/ansible-best-practices-and-security-when-to-use-and-when-not\/"},"modified":"2026-05-04T19:27:32","modified_gmt":"2026-05-04T17:27:32","slug":"ansible-best-practices-and-security-when-to-use-and-when-not","status":"publish","type":"post","link":"https:\/\/chrisengelhard.nl\/en\/ansible-best-practices-and-security-when-to-use-and-when-not\/","title":{"rendered":"Ansible best practices and security: when to use and when not"},"content":{"rendered":"\n
<\/div>
\n

Table of Contents<\/strong><\/p>\n\n\n\n

1<\/span>Wat is het idee achter SSH-monitoring met Ansible?<\/a><\/span><\/div>
2<\/span>Waarom is dit problematisch?<\/a><\/span><\/div>
2.1<\/span>1. Securityrisico\u2019s<\/a><\/span><\/div>
2.2<\/span>2. Ineffici\u00ebntie en vertraging<\/a><\/span><\/div>
2.3<\/span>3. Geen real-time monitoring<\/a><\/span><\/div>
2.4<\/span>4. Slechte schaalbaarheid<\/a><\/span><\/div>
3<\/span>Waarom promoten influencers dit?<\/a><\/span><\/div>
4<\/span>Wanneer Ansible w\u00e9l gebruiken volgens best practices<\/a><\/span><\/div>
5<\/span>Wat gebruik je dan wel voor monitoring?<\/a><\/span><\/div>
5.1<\/span>1. Lightweight agents<\/a><\/span><\/div>
5.2<\/span>2. Monitoring stacks<\/a><\/span><\/div>
5.3<\/span>3. Push-based logging<\/a><\/span><\/div>
5.4<\/span>4. Beveiliging<\/a><\/span><\/div>
6<\/span>Conclusie<\/a><\/span><\/div><\/div><\/div>\n<\/section>\n\n

Ansible best practices are crucial for anyone who wants to automate infrastructure safely and efficiently. Although Ansible is a powerful tool, it is important to know when it is suitable and when it is not. In this blog we cover those moments and examine a commonly used example: SSH-based monitoring via Ansible. This example is often promoted by influencers in their homelabs, but has pitfalls that you should avoid in production.<\/p>\n\n

\n\n

[top<\/a>]<\/p>\n\n

What is the idea behind SSH monitoring with Ansible?<\/h2>\n\n

You see it more and more: influencers on YouTube and other social media channels \u2014 often from their homelab \u2014 show how you can periodically log in to remote systems via SSH with Ansible, combined with cronjobs or schedulers. This approach is presented as easy and quick for basic metrics such as memory and disk usage.<\/p>\n\n

It works like this:<\/p>\n\n