To make sure each Sylphe server is configured the same way, Ansible is used. It also allows to deploy configuration edits on the whole infrastructure at once. Ansible playbooks are hosted on a user-restricted git.
Tyria hosts the git repo hosting all configuration files. As such, configuration edits can be pushed by any authorized user.
Connection between servers relies on public key authentication with a dedicated user which then sudoes to access critical data.