trade-host-iac/sol/public-edge

sol public edge

Host preparation for public HTTP and HTTPS exposure on sol.

Purpose

• reserve and open 80/tcp and 443/tcp on sol
• keep the host-side firewall state reproducible from Git
• support the cluster-side public-edge module in trade-next/trade-gitops

Operator Flow

From the repository root:

./sol/public-edge/scripts/prepare-sol-public-edge.sh

Or push to main and let .gitea/workflows/prepare-sol-public-edge.yaml execute the same step from the trade-next runner.

This script:

• verifies the target host is reachable over SSH
• opens 80/tcp and 443/tcp on enp6s0 in ufw if the rules are missing
• prints the resulting ufw rules and current listeners on 80 and 443

Workflow Prerequisite

• organization secret SOL_SSH_PRIVATE_KEY_B64 must contain the base64-encoded private key for user@149.50.96.162
• workflow execution path is .gitea/workflows/prepare-sol-public-edge.yaml