3 ms·
All deploys are done from a VPS host machine secured behind a firewall and only accessible via passphrase-protected ssh keys. All secrets are in a file on ther
by whateveracct 4y ago
All deploys are done from a VPS host machine secured behind a firewall and only accessible via passphrase-protected ssh keys.
All secrets are in a file on there. I make it a file of exports I source before launching the app. Backup the file in 1pw.
Secrets get deployed along with the app to a server also secured with ssh and a firewall/VPC.
Maybe doesn't scale to an org chart, but a scrappy startup of 3-5 with some contractors and it works well. This method allows you to literally have a single VPS prod host and a single VPS deploy box. That's $10 and super simple and completely cloud-agnostic.