i like ansible too, also i like reading HCL '__') because it's just like nginx/caddy/juniper config file.

for state file, usually using gitops (git based execution) solved the problem