Security - DeployHQ Blog

Advice and information on protecting your servers, systems, and websites.

How to Keep API Keys Out of Your Git Repository (With Code Examples)

One git push with a hardcoded API key can compromise your infrastructure. This guide covers .env file setup, language-specific examples, automated secret scanning with git-secrets and truffleHog, and how to deliver secrets to production safely with DeployHQ.

Keeping your DeployHQ account secure

DeployHQ offers many security configuration options for your account, such as enforcing two factor authentication, IP restricted access, and granular user restrictions.

Deploying to servers in a private network

Learn how to deploy to servers behind firewalls and private networks using the DeployHQ Agent, a lightweight proxy that creates a secure outbound connection to route deployment traffic.