Deploying through a private network

I built a release path that lets an automated workflow reach a private server without opening remote administration to the wider internet. Each deployment connects through an encrypted mesh, updates the containers and leaves the public attack surface unchanged.