I'm working up notes on my attempts to convert a medium-sized group of Debian systems to a managed infrastructure. Some of the steps I'm borrowing directly from here, such the Apache2 SSL setup instructions and the autoapt script for cfengine. Others I'm adapting to my own needs, such as my preseed setup (starting point here), and modifying autoapt to handle GNU Stow packages.

Posts so far (in infrastructures.org terminology):

• Introduction
• Version control
• Gold server
• Host install tools
• Ad hoc change tools
• Directory servers
• Authentication servers (old nasty version nobody should replicate, much improved version that won't cost you your credibility at the local sysadmin bar)
• Time synchronization
• Network file servers (part 1 and 2)
• Client application management (for official deb packages, for stow packages, and for making deb packages of enormous commercial packages)