Tech:Private Git

From Orain Meta
Jump to navigation Jump to search

Orain's private git repo is stored on Tech:prod7 and is read-only by the user 'git' and commit only to the user 'root'.

User 'git'

The git user is used to automatically update /root/private on all Orain servers and the account is authenticated via ssh by a private key stored in the private git repo (along with the public key as well). Ansible uses one of the keypairs from the private repo to authenticate to prod7 in order to download the latest code.

Files stored

Only ops can commit to the repo via the root user.