Locking Down SSH in a DMZ for Hugo Deployments

Hardening SSH access to a DMZ web server revealed an overlooked dependency in my Hugo deployment pipeline: the server also needs outbound SSH to pull from Git.

February 18, 2026 · Updated today · 5 min · Roland Hill