Lullabot's deployment processes combine both privately and publicly accessible services and resources.
Zequi Vazquez describes how they automate deployments to an internal Debian server using WireGuard VPN, an HMAC-authenticated webhook, and a centralized GitHub Actions workflow without exposing their server to the public internet.