4.2. Production
This chapter contains two examples to build on and some general hints for productive use. While the examples can be used as a base they obviously don’t obsolete a specific analysis and implementation of individual needs.
Furthermore the deployment of a community server and a test server is documented as well. Those are not used in an applied medical context but still in productive use.
Some advices apply for both examples:
Use strong, randomly generated passwords - e.g. 20 partly special characters. Check the password manager KeePassXC if you don’t know how.
Do not use a password more than one time. This does not only reduce the risk of losing a global password but also avoids confusing different servers.
Deactivate password based SSH and use keys instead.
Avoid home folders on servers for administration tasks: If one admin leaves, another one should still have e.g. the Ansible directory
When using Incus - no matter if for testing or production - use networks & projects to separate different areas of work. Note that profiles are also target of configuration options inside projects.