Not /etc/ Nothing really changes much in /etc unless you physically do it yourself. On a Pi there are a couple of exceptions (e.g. fakehardwareclock gets written to once an hour by a cron job, resolv.conf gets written to once a day, etc) but for the most part etc is pretty static by design. It is intended to be configuration data, not runtime data.
I’ve posted my Ansible playbook I use to set up my Pis as readonly here.
If you use Ansible you should be able to use this as is. If not you should be able to figure out the steps to make it work.
