The answer file that built your server is a small file with enormous value. This page shows how technicians protect it: Git version control, a commit for every change, and the one iron rule about secrets that keeps the recipe safe to store.
Six months from now you will ask a question like: “why does this server have that setting?” or “what did the recipe look like when we built the branch server?” Memory answers those questions badly. Git answers them exactly, because it keeps every version of the recipe with the date and your note about why it changed. The habit takes ten minutes to start and pays out for the life of the fleet.
Put the recipe files in one folder — the answer file, the per-machine table, your notes — and make that folder a Git repository.
cd ~/server-recipe then git initgit add . stages everything in the foldergit commit -m "Recipe v1 - first working build" records version one forevergit config --global user.name and user.emailFrom now on the rule is simple: no silent edits. Every change to the recipe gets a commit whose message says why, not what — the diff already shows what. “Add Docker to starter software because the apps server needs it” will still make sense in two years. “Update file” will not. Tag the versions you actually build machines from, for example git tag v3-office, so any server can be traced to the exact recipe that made it.
A recipe usually contains things that must never be copied around: passwords, private keys, tokens. Git remembers everything forever, including things you later delete from the file — they stay in the history.
Recipe broke a build? git log shows what changed since the last good version, and checking out that version takes a minute. Wondering whether a setting was deliberate? The commit message says why. New technician joining? The repository is the handover document.
Create the repository right after your first successful build from the video — version one deserves to be the known-good one.
▶️ Watch Full VideoNo. Git works entirely on your own machine or your own server. An online copy at a Git host is a convenient extra backup of the repository, but only after the no-secrets rule is firmly in place.
The answer file or setup configuration, the per-machine table, build notes, and any small helper files the setup uses. Not the server’s data, not backups of the disk, and never credentials or private keys.
Run git log --oneline to see the versions, then git checkout the last good commit’s files — or simply view the old version of the file with git show. Nothing committed is ever really lost, which is the whole point.