We have a Git repo sitting behind a firewall. As I see it, there are two ways of authenticating/accessing the Git repo:
- Add a Reverse HTTP Proxy in the DMZ that communicates with the Git repo. This will allow the user to access Git over HTTPS.
- Poke a hole in the firewall to allow traffic to the Git repo on SSH. This will allow the user to access Git over SSH.
We have another policy that requires use of cert/keys based authentication instead of a static user/password. So this rules out Option #1. But we are not comfortable with poking a hole in the Firewall.
What options do we have? Is there a Reverse HTTP Proxy like solution for SSH as well?