Recommended /etc/ directories to apply version control
 

I sometimes find myself making changes to some configuration, and needing to go back.

When building my last server, I used git for version control on the /etc/ directory.

Thought it was a good idea until I realized I /etc/pki/ was included. Maybe doesn't mater but still doesn't seem like the right thing to do. Also, files such as /etc/systemd/system/basic.target.wants/firewalld.service are changed not by me but by some other script.

Are there any good practices I should follow regarding version control of configuration files. One for all of /etc/? Maybe each application individually?

Thanks

https://help.github.com/articles/ignoring-files/ for /etc/pki /etc/other

:)

Thanks Habitual,

Yeah, that is the plan. My question is which directories should or shouldn't be ignored. For instance, you agree your private keys shouldn't be? If not these, what other directories?

How about considering it from a services point of view and controlling the ones for the services you know you will want ?