Hacker News new | ask | show | jobs
by whateveracct 1199 days ago
All deploys are done from a VPS host machine secured behind a firewall and only accessible via passphrase-protected ssh keys.

All secrets are in a file on there. I make it a file of exports I source before launching the app. Backup the file in 1pw.

Secrets get deployed along with the app to a server also secured with ssh and a firewall/VPC.

Maybe doesn't scale to an org chart, but a scrappy startup of 3-5 with some contractors and it works well. This method allows you to literally have a single VPS prod host and a single VPS deploy box. That's $10 and super simple and completely cloud-agnostic.