@toomanysecrets since you mentioned jails, ansible, and bastille, do you have an example that could be shared? I've been trying out some ansible/jails connectors that use vanilla jail.conf instead of bastille. The initial setup is just ssh into each jail. I am planning to switch to just logging in to each host and managing the jails from the host.

Foe my use case, scale isn't as important as a DR plan to provision a server, pull in ZFS snapshot backup data, and continue service.