Bitbucket read-only SSH access

I’m about to start a small webapp related to the upcoming ManPad. Of course, the sources of this app are securely stored in a git repository, on bitbucket actually.

To make things easy, I’d like to be able to deploy the latest version of the app by simply issuing a git pull. But to make things secure, I need to be sure that corrupting my server would not allow anyone to write to my git repository.

That’s where so-called “deployment keys” come into play. Bitbucket allow us to declare read-only SSH keys for a specific repository, and it works even if your repository is private, which is a very cool option!

Read more on their blog.