Our git repos aren't public so it totally has our forge key in there. That being said, we don't use it for DR. Our VMs get restored to our DR site and I have to modfy a network setting and Puppet CD just kind of works after that.