Configure the EC2 security group as the public network boundary for git.inviscid.net and verify that only the intended ports are reachable.
Acceptance criteria:
Security group ssw590-web-sg allows only 443, 80, and 22; each rule has a description.
Host and Compose port mappings are recorded; Gitea 3000 is bound to loopback only and Gitea SSH is disabled.
External tests are recorded with source, expected, and actual results for 443, 80, 22, 3000, and 222.
Temporary rules are removed, and failed attempts and corrections are documented.
Configure the EC2 security group as the public network boundary for git.inviscid.net and verify that only the intended ports are reachable.
Acceptance criteria:
- [x] Security group `ssw590-web-sg` allows only 443, 80, and 22; each rule has a description.
- [x] Host and Compose port mappings are recorded; Gitea 3000 is bound to loopback only and Gitea SSH is disabled.
- [x] External tests are recorded with source, expected, and actual results for 443, 80, 22, 3000, and 222.
- [x] Temporary rules are removed, and failed attempts and corrections are documented.
payton
self-assigned this 2026-10-15 23:19:59 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Configure the EC2 security group as the public network boundary for git.inviscid.net and verify that only the intended ports are reachable.
Acceptance criteria:
ssw590-web-sgallows only 443, 80, and 22; each rule has a description.External tests ran from an allowed IP and disallowed hotspot, with all results as expected