Sold by: Lynxroute
Deployed on AWS
Free Trial
This is a repackaged open source software product wherein additional charges apply for hardening, security configuration, and setup support.
Gitea is an open-source, lightweight self-hosted Git service with code hosting, pull requests, issues, and Gitea Actions CI/CD. This Lynxroute build is security baked in: PostgreSQL 16 backend, Nginx reverse proxy with TLS, unique admin credentials at first boot, UFW firewall pre-configured, and CIS Level 1 hardened Ubuntu 24.04 LTS base.
MIT license - fully auditable, no vendor lock-in.
Overview
This is a repackaged open source software product wherein additional charges apply for hardening, security configuration, and setup support.
WHAT IS GITEA
Gitea is a lightweight self-hosted Git service - a single statically linked Go binary that provides code hosting, pull requests, issue tracking, project boards, releases, and a built-in container registry. Gitea Actions runs Docker-based CI/CD pipelines compatible with the GitHub Actions workflow syntax. Operators get team and organisation management, fine-grained branch protection, OAuth/OIDC SSO, webhook integrations, and a REST + Swagger API. Persists code, issues, users and metadata in PostgreSQL with Git objects on the local filesystem. The fastest path to a fully self-hosted GitHub or GitLab alternative for teams that want code, issues and CI in one process. MIT license - no per-seat fees, no vendor lock-in.
WHAT THIS AMI ADDS
Security hardening:
- Admin account with unique password (EC2 Instance ID) at first boot
- Four internal secrets generated per instance at first boot
- Nginx reverse proxy with TLS
- UFW firewall - ports 22, 80, 443, 2222
- fail2ban, AppArmor
- PostgreSQL 16 local, listening on 127.0.0.1 only
OS hardening (CIS Level 1):
- CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
- auditd, SSH hardening, Kernel hardening, IMDSv2 enforced
Compliance artifacts:
- SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
- CIS Conformance Report at /etc/lynxroute/cis-report.html
- CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md
Highlights
- Gitea security baked in: PostgreSQL 16, Nginx TLS, unique admin credentials and four internal secrets per instance.
- CIS Level 1 hardened Ubuntu 24.04 LTS: auditd, fail2ban, AppArmor, SSH key-only, IMDSv2 enforced. CVE-scanned before every release. SBOM (CycloneDX) and CIS Conformance Report included.
- Full self-hosted Git platform: code hosting, pull requests, issues, wikis, and Gitea Actions CI/CD.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 24.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
t3.small Recommended | $0.03 |
m6i.large | $0.05 |
t3.large | $0.05 |
t3.medium | $0.05 |
Dimensions summary
You pay by the hour for the EC2 instance size you run. The four options are compute sizes, not feature tiers. Each runs the same hardened Git service image. The t3.small, t3.medium, and t3.large are burstable instances that scale up in memory and CPU. The m6i.large is a fixed-performance general-purpose instance. Your cost scales with the size you pick and the hours you run it. You add standard AWS infrastructure charges on top of the hourly software rate.
Top-of-mind questions for buyers
Each option maps to an EC2 instance type. The t3.small, t3.medium, and t3.large are burstable instances with rising CPU and memory at each step. The m6i.large is a fixed-performance general-purpose instance. All four run the same hardened Git service image.
The hourly software rate meters running time only. A fully stopped instance does not accrue software charges. Stopped instances may still incur AWS storage fees for attached volumes, which are separate from the software rate you see in the table.
Each image ships with CIS Ubuntu 24.04 Level 1 hardening applied, including SSH and kernel hardening, a firewall, and intrusion prevention. A software bill of materials and a CIS Conformance Report are bundled inside. Unique credentials are generated at first boot.
lynxroute.com
Helpful?
Vendor refund policy
We do not offer refunds for this product. AWS infrastructure charges (EC2, EBS, data transfer) are billed separately by AWS and are not refundable by us. If you experience technical issues with the AMI, please contact us at https://lynxroute.com before requesting a refund.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Gitea 1.27.3
- Gitea 1.27.3 on Ubuntu 24.04 LTS - patch update from 1.27.2. MIT unchanged
- Security: package registry access is now restricted correctly by token scope and by restricted or limited account status, attachments are bound to their owning repository, cross-repository issue references are checked against the same repository, and Actions artifact signatures are verified before use
- Security: limited users are hidden from restricted viewers, repositories of hidden owners are hidden, fork pull-request trust boundaries are enforced, git hook permissions are restricted, and the repository-creation and compare endpoints check token authorization
- Adds permalinks to pull request reviews
- Fixes the pull-request merged state drifting from git, OpenPGP signature verification using an SSH instance key, co-author trailers that are not RFC 5322 addresses, and Actions matrix job grouping
- Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base
Additional details
Usage instructions
- Launch instance (t3.small recommended)
- Open Security Group - allow TCP 443 and TCP 2222 from your IP
- SSH: ssh -i key.pem ubuntu@<PUBLIC_IP>
- Read credentials: sudo cat /root/gitea-credentials.txt
- Open https://<PUBLIC_IP> in your browser - accept the self-signed certificate warning
- Log in with admin credentials from the credentials file
Admin password equals the EC2 Instance ID. Credentials are saved to /root/gitea-credentials.txt at first boot. Certbot (with the nginx plugin) is pre-installed. Replace the self-signed TLS certificate with a CA-signed certificate for production use: sudo certbot --nginx -d your.domain.com
Resources
Vendor resources
Support
Vendor support
Visit us online: https://lynxroute.com
For Gitea upstream issues (bugs, features, repository behavior): https://github.com/go-gitea/gitea/issues
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
This product has charges associated with it for TurnKey integration, maintenance, and support. Gitea is a preconfigured open-source appliance with automated security updates and backup tools.
The end-to-end secrets security platform for enterprises. Scan and fix hardcoded secrets in source code, CI/CD pipelines, and productivity tools with GitGuardian code security platform.
The official Ubuntu Linux, optimized for AWS with five years of security maintenance.
This product has charges associated with it for seller support and enhanced security configurations. It provides Jenkins pre-installed on a secure Ubuntu 24.04 LTS environment, optimized for cloud deployment and includes support.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.