default account should be ops
webserver configuration should reside in the config repo as well