Is it acceptable to deploy git in the production site directory?

Question

git

There is a battle site. Now improvements are taking place on it. In the process of deploying a normal scheme with a dev server. While everything is being prepared and tested, I would like to be able to track changes taking place on the production site.
How much deployment is allowed in his git directory? Doesn't this pose any security issues?

Answer 1

This is common practice.
There will be no security problems if the web server is configured correctly (forbidding it to go to the .git folder).

Answer 2

close the .git folder itself for access, otherwise there are no problems