We like fail2ban
Pin some versions
I don't trust chef-client service

Prefer cron
Config stuff
Tags
Git needs to run before most things

Or shit explodes
Cron, not service
Cron attributes
This got reformatted
No
Bumpety bump
Bumpety bump
Oops, not in production