At a previous place I worked, someone setup something similar with `git pull && ansible-playbook` on a cron It was using GitHub so just needed a read-only key

At a previous place I worked, someone setup something similar with `git pull && ansible-playbook` on a cron It was using GitHub so just needed a read-only key and could be bootstrapped by connecting to the server directly and running the playbook once In addition, it didn't need any special privileges or permissions. The playbook setup remote logging (shipping to CloudWatch Logs since we used AWS heavily) along with some basic metrics so the whole thing could be monitored. Plus, you can get a cron email as basic monitoring to know if it failed Imo it was a pretty clever way to do continuous deploy/updates without complicated orchestrators, management servers, etc