For fairly modest sites or projects 1. Configure your webserver to hide common directories and files. 2. Don't store passwords / credentials in version contro

For fairly modest sites or projects 1. Configure your webserver to hide common directories and files. 2. Don't store passwords / credentials in version control. 2a. If you use a test suite, add a test to verify this. 3. Have a make step that builds the deployment content into a separate directory. (e.g. a gulp deploy task) 4. Rsync the deploy content to your destination server. Instead of 4, more complex systems (with multiple servers, libraries, etc) use Docker to build an image from your deloy content.