It's simple. Give developers access to production servers but not root privilege. Deployment and configuration change should go through change request ticket,

It's simple. Give developers access to production servers but not root privilege. Deployment and configuration change should go through change request ticket, whose main purpose is communication to the group and maintaining a history of changes to the production site. Change tickets can be as simple as sending an email to a group list or an elaborate system of reviews and approvals using ticket tracking app. Implementation of the change ticket can be done by developer, qa, sysadmins, DBA, or ops, depending on the needs and required privileges. Routine stuffs should be automated. It usually takes a few times of site down and screwup before some form of process to be put in place.