infra/README.md

infra: deployment files for git.ssw590-g1.tech

Non-secret files that run the Group 1 Gitea (SQLite) behind a Caddy reverse proxy on one AWS EC2 instance. No passwords, tokens or keys are stored here.

File	Purpose
docker-compose.yml	Gitea gitea/gitea:1.27.3 and Caddy caddy:2.11.7; only Caddy publishes ports 80 and 443
Caddyfile	Automatic HTTPS (Let's Encrypt) and reverse proxy to gitea:3000
.env.example	Image versions and the hostname; copy to .env
aws/ec2-user-data.sh	First-boot script for Amazon Linux 2023: 2 GB swap, Docker, git, pinned Docker Compose

Deploy: cp .env.example .env, then docker compose config -q && docker compose pull && docker compose up -d. The security group allows 443 and 80 from anyone and 22 only from the administrators' address.