[majkinetor]

You think PI could use polling to determine when to deploy ?

SSH/VPN all have the same problem - you need to give secret to remote infrastructure

> for secrets in Keybase i think repos are better since its not as easy to mistakenly delete the files ?

Good observation, having historic secrets could also be used as a feature.

[zemanel]

to determine when to deploy i mention its possible to listen to team chat messages for commits, so event based. There might be more efficient solutions, think i came across somewhere that its possible to listen to other types of events. need to dig deeper