We have git repo sitting behind a firewall. As I see, there are two ways of authenticating/accessing the git repo
- Add a Reverse HTTP Proxy in the DMZ that communicates with the git repo. This will allow the user to access the git of HTTPS
- Poke a hole in the Firewall to allow traffic to the git repo on SSH. This will allow the user to access git over SSH.
We have another policy that requires use of cert/keys based authentication instead of a static user/password. So this rules our Option 1. But we are not comfortable with poking a hole in the Firewall.
What options do we have? Is there Reverse HTTP Proxy like solution for SSH as well?