-
Deploy Prod with its own SSH key
All checks were successfulProd deploy / Deploy the released images to Prod (push) Successful in 15sCD / Build and push images (push) Successful in 1m6sCD / Deploy to Test (push) Successful in 11sCD / Smoke tests against Test (push) Successful in 1m18sCD / Promote to Int (push) Successful in 11sCI / Lint, typecheck, test (push) Successful in 4m16sCI / Build container images (push) Has been skippedCI / Auth e2e pack (push) Successful in 6m18sCI / Import/export fidelity gate (push) Successful in 47sreleased this
2026-07-14 14:07:11 +02:00 | 180 commits to main since this releaseprod-deploy.yml reused the test-stage deploy key since go-live (the
checklist's optional-hygiene item). A third keypair now completes the
one-key-per-stage picture: DEPLOY_SSH_KEY_PROD secret, pubkey
dorfteich-deploy-prod in the deploy user's authorized_keys. This
separates rotation and audit per stage — not privileges: every key
lands in the same docker-group deploy user on the single host.Co-Authored-By: Claude Fable 5 noreply@anthropic.com
Downloads