Don't build in the dark
We had our first informal infra and security audit at euquista. Nic Wortel came in to have a look and ask some really good questions.
We haven't done anything too out there. There's room to improve: whether Ansible makes sense for configuration management (rather than... make), whether Kubernetes is on the horizon. Things worth thinking about deliberately rather than running into later.
What I didn't expect was the relief. Not from being told things were fine, but from just sharing the work. Building something yourself means you stop seeing it clearly. You don't know what you don't know, and that sits in the back of your head.
Don't build in the dark. It doesn't protect you from anything. It just makes you anxious.