[LRUG] Setting up SSH for multiple people to deploy an app

[Matthew Rudy Jacobs]

for deploy I normally have a single account which runs the app, and all
deploys are performed as.

then disable password login, and keep your authorized keys clean.

for admin accounts I would have separate accounts per user.

I guess it depends on what security requirements you have.
On 18 Apr, 2013 1:02 AM, "Richard Livsey" <richard at livsey.org> wrote:

> What's the best way of setting up a server for multiple people to deploy
> to these days?
>
> /var/www/site is currently owned by www-data:www-data
>
> I don't want www-data to be a full user who can SSH in, individual users
> should be able to SSH in as themselves.
>
> I'm thinking of adding all users who can deploy to the 'www-data' group
> and then setting the /var/www/site as 2775 so that it's writable by anyone
> in that group.
>
> That combined with agent forwarding should mean that github deploy keys
> should all work for the individual users too.
>
> Does this make sense, or are there simpler/better ways?
>
> Cheers.
> _______________________________________________
> Chat mailing list
> Chat at lists.lrug.org
> http://lists.lrug.org/listinfo.cgi/chat-lrug.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lrug.org/pipermail/chat-lrug.org/attachments/20130418/07655c48/attachment-0003.html>