Brian Pitts

I was wondering abut SSH key security; do you have a way of enforcing a passphrase?

:+1:

Can you rewrite your branch so that there's one commit in this PR? Otherwise, atfer a quick review this appears good.

Also, #7 needs done first

Not I.

@varac I do not plan to implement this myself. I'll keep this issue open so anyone who wants to contribute this feature knows that it is welcome.

We could do it on AWS, but I don't think it's worth the effort given our migration timeline. Just adding support for this when running on GCP sounds fine.

That actually makes sense to me, since the domain we're accessing it at is independent of the storage mechanism. I guess the storage library does have that option for AWS...

If it simplifies your implementation a great deal, we could configure the load balancer to recognize the same path as storage.googleapis.com. Basically, at the load balancer you get to [map...

FYI we should be ready on the GCP side to test this functionality this week.