ops(sol): add public edge host preparation
Some checks failed
prepare-sol-public-edge / prepare (push) Has been cancelled
Some checks failed
prepare-sol-public-edge / prepare (push) Has been cancelled
This commit is contained in:
29
sol/public-edge/README.md
Normal file
29
sol/public-edge/README.md
Normal file
@@ -0,0 +1,29 @@
|
||||
# sol public edge
|
||||
|
||||
Host preparation for public `HTTP` and `HTTPS` exposure on `sol`.
|
||||
|
||||
## Purpose
|
||||
|
||||
- reserve and open `80/tcp` and `443/tcp` on `sol`
|
||||
- keep the host-side firewall state reproducible from Git
|
||||
- support the cluster-side `public-edge` module in `trade-next/trade-gitops`
|
||||
|
||||
## Operator Flow
|
||||
|
||||
From the repository root:
|
||||
|
||||
```bash
|
||||
./sol/public-edge/scripts/prepare-sol-public-edge.sh
|
||||
```
|
||||
|
||||
Or push to `main` and let `.gitea/workflows/prepare-sol-public-edge.yaml` execute the same step from the `trade-next` runner.
|
||||
|
||||
This script:
|
||||
|
||||
- verifies the target host is reachable over SSH
|
||||
- opens `80/tcp` and `443/tcp` on `enp6s0` in `ufw` if the rules are missing
|
||||
- prints the resulting `ufw` rules and current listeners on `80` and `443`
|
||||
|
||||
## Workflow Prerequisite
|
||||
|
||||
- organization secret `SOL_SSH_PRIVATE_KEY_B64` must contain the base64-encoded private key for `user@149.50.96.162`
|
||||
Reference in New Issue
Block a user