Overview
This is a repackaged software product wherein additional charges apply for hardening, security configuration, and support.
WHAT IS GITEA
Gitea is a lightweight self-hosted Git service - a single statically linked Go binary that provides code hosting, pull requests, issue tracking, project boards, releases, and a built-in container registry. Gitea Actions runs Docker-based CI/CD pipelines compatible with the GitHub Actions workflow syntax. Operators get team and organisation management, fine-grained branch protection, OAuth/OIDC SSO, webhook integrations, and a REST + Swagger API. Persists code, issues, users and metadata in PostgreSQL with Git objects on the local filesystem. The fastest path to a fully self-hosted GitHub or GitLab alternative for teams that want code, issues and CI in one process. MIT license - no per-seat fees, no vendor lock-in.
WHAT THIS AMI ADDS
Security hardening:
- Admin account with unique password (EC2 Instance ID) at first boot
- Four internal secrets generated per instance at first boot
- Nginx reverse proxy with TLS
- UFW firewall - ports 22, 80, 443, 2222
- fail2ban, AppArmor
- PostgreSQL 16 local, listening on 127.0.0.1 only
OS hardening (CIS Level 1):
- CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
- auditd, SSH hardening, Kernel hardening, IMDSv2 enforced
Compliance artifacts:
- SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
- CIS Conformance Report at /etc/lynxroute/cis-report.html
- CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md
Highlights
- Gitea security baked in: PostgreSQL 16, Nginx TLS, unique admin credentials and four internal secrets per instance.
- CIS Level 1 hardened Ubuntu 24.04 LTS: auditd, fail2ban, AppArmor, SSH key-only, IMDSv2 enforced, SBOM and CIS Conformance Report included for compliance and audit teams.
- Full self-hosted Git platform: code hosting, pull requests, issues, wikis, and Gitea Actions CI/CD with GitHub-compatible API - all repositories stay within your own VPC.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
Dimension | Cost/hour |
|---|---|
t3.small Recommended | $0.02 |
t3.large | $0.03 |
t3.medium | $0.02 |
m6i.large | $0.03 |
Vendor refund policy
We do not offer refunds for this product. AWS infrastructure charges (EC2, EBS, data transfer) are billed separately by AWS and are not refundable by us. If you experience technical issues with the AMI, please contact us at https://lynxroute.com before requesting a refund.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Updated to Gitea 1.26.1. Bug fixes and stability improvements.
Additional details
Usage instructions
- Launch instance (t3.small recommended)
- Open Security Group - allow TCP 443 and TCP 2222 from your IP
- SSH: ssh -i key.pem ubuntu@<PUBLIC_IP>
- Read credentials: sudo cat /root/gitea-credentials.txt
- Open https://<PUBLIC_IP> in your browser - accept the self-signed certificate warning
- Log in with admin credentials from the credentials file
Admin password equals the EC2 Instance ID. Credentials are saved to /root/gitea-credentials.txt at first boot. Replace the self-signed TLS certificate with a CA-signed certificate for production use.
Resources
Vendor resources
Support
Vendor support
Visit us online: https://lynxroute.com
For Gitea upstream issues (bugs, features, repository behavior): https://github.com/go-gitea/gitea/issues
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
