Remove public Gitea NodePort side door

2026-06-14 02:26:59 +02:00 · 2026-06-14 02:26:59 +02:00 · 9c4b400cb6
commit 9c4b400cb6
parent a1b55776fa
9 changed files with 124 additions and 9 deletions
--- a/docs/observability-operating-evidence.md
+++ b/docs/observability-operating-evidence.md
@ -57,6 +57,10 @@ curl -i https://gitea.coulomb.social/v2/
 curl -i https://gitea.coulomb.social/api/packages/coulomb/pypi/simple/
 ```

+The raw node IP HTTP NodePort is intentionally not part of the public health
+surface. Treat any reachable `http://<node-ip>:<gitea-nodeport>/` web route as
+a regression to close, not as an alternate supported endpoint.
+
 Git SSH:

 - If a Git SSH endpoint is published, verify it with a read-only `git ls-remote`