|
|
|
|
|
by whateveracct
1199 days ago
|
|
All deploys are done from a VPS host machine secured behind a firewall and only accessible via passphrase-protected ssh keys. All secrets are in a file on there. I make it a file of exports I source before launching the app. Backup the file in 1pw. Secrets get deployed along with the app to a server also secured with ssh and a firewall/VPC. Maybe doesn't scale to an org chart, but a scrappy startup of 3-5 with some contractors and it works well. This method allows you to literally have a single VPS prod host and a single VPS deploy box. That's $10 and super simple and completely cloud-agnostic. |
|