but you still need to ssh on each instance
git over HTTP and NIP-93 or whatever it was
good idea, but then you have to accept anyone pushing stuff to your server?
you could do access control