I've heard some time ago that you should always pull from
the destination rather than push from the source. Can't recall
the reasoning ...seems that there would be risk involved either way.
Like many of you, I am syncing to a web server and am just curious
as to which method you choose and why.
I am using this command on a cron job:
rsync -az -e ssh --delete ~/goodies/* fakeuser@fakehost:/webroot/blah/
Should I be pulling from the server instead of pushing from the client?
Also, what is your take on passphrase-less keys a la ssh-keygen?
This maneuver has to be scripted as the content is auto-generated from
a database and refreshed every Monday. If you know of a more secure way
to script/schedule this without using passphrase-less ssh keys or some
clumsy expect script, your advice would be much appreciated.
Thanks for reading!