Adds a deploy account with no password (--disabled-password) and an empty comment field (--gecos ''), so it can only be reached with an SSH key — the safest shape for an app-deploying service account. Add the key with mkdir -p /home/deploy/.ssh and echo into authorized_keys. Grant sudo separately with usermod -aG sudo.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.