Sold by: Lynxroute
Deployed on AWS
Free Trial
This product has charges associated with it for hardening, security configuration, and support.
Gitea is an open-source, lightweight self-hosted Git service with code hosting, pull requests, issues, and Gitea Actions CI/CD. This Lynxroute build is security baked in: PostgreSQL 16 backend, Nginx reverse proxy with TLS, unique admin credentials at first boot, UFW firewall pre-configured, and CIS Level 1 hardened Ubuntu 24.04 LTS base.
MIT license - fully auditable, no vendor lock-in.
Overview
This is a repackaged software product wherein additional charges apply for hardening, security configuration, and support.
WHAT IS GITEA
Gitea is a lightweight self-hosted Git service - a single statically linked Go binary that provides code hosting, pull requests, issue tracking, project boards, releases, and a built-in container registry. Gitea Actions runs Docker-based CI/CD pipelines compatible with the GitHub Actions workflow syntax. Operators get team and organisation management, fine-grained branch protection, OAuth/OIDC SSO, webhook integrations, and a REST + Swagger API. Persists code, issues, users and metadata in PostgreSQL with Git objects on the local filesystem. The fastest path to a fully self-hosted GitHub or GitLab alternative for teams that want code, issues and CI in one process. MIT license - no per-seat fees, no vendor lock-in.
WHAT THIS AMI ADDS
Security hardening:
- Admin account with unique password (EC2 Instance ID) at first boot
- Four internal secrets generated per instance at first boot
- Nginx reverse proxy with TLS
- UFW firewall - ports 22, 80, 443, 2222
- fail2ban, AppArmor
- PostgreSQL 16 local, listening on 127.0.0.1 only
OS hardening (CIS Level 1):
- CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
- auditd, SSH hardening, Kernel hardening, IMDSv2 enforced
Compliance artifacts:
- SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
- CIS Conformance Report at /etc/lynxroute/cis-report.html
- CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md
Highlights
- Gitea security baked in: PostgreSQL 16, Nginx TLS, unique admin credentials and four internal secrets per instance.
- CIS Level 1 hardened Ubuntu 24.04 LTS: auditd, fail2ban, AppArmor, SSH key-only, IMDSv2 enforced, SBOM and CIS Conformance Report included for compliance and audit teams.
- Full self-hosted Git platform: code hosting, pull requests, issues, wikis, and Gitea Actions CI/CD with GitHub-compatible API - all repositories stay within your own VPC.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 24.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
t3.small Recommended | $0.03 |
m6i.large | $0.05 |
t3.large | $0.05 |
t3.medium | $0.05 |
Dimensions summary
You pay by the hour for the EC2 instance size you run. The four options are compute sizes, not feature tiers. Each runs the same hardened Git service image. The t3.small, t3.medium, and t3.large are burstable instances that scale up in memory and CPU. The m6i.large is a fixed-performance general-purpose instance. Your cost scales with the size you pick and the hours you run it. You add standard AWS infrastructure charges on top of the hourly software rate.
Top-of-mind questions for buyers
Each option maps to an EC2 instance type. The t3.small, t3.medium, and t3.large are burstable instances with rising CPU and memory at each step. The m6i.large is a fixed-performance general-purpose instance. All four run the same hardened Git service image.
The hourly software rate meters running time only. A fully stopped instance does not accrue software charges. Stopped instances may still incur AWS storage fees for attached volumes, which are separate from the software rate you see in the table.
Each image ships with CIS Ubuntu 24.04 Level 1 hardening applied, including SSH and kernel hardening, a firewall, and intrusion prevention. A software bill of materials and a CIS Conformance Report are bundled inside. Unique credentials are generated at first boot.
lynxroute.com
Helpful?
Vendor refund policy
We do not offer refunds for this product. AWS infrastructure charges (EC2, EBS, data transfer) are billed separately by AWS and are not refundable by us. If you experience technical issues with the AMI, please contact us at https://lynxroute.com before requesting a refund.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Gitea 1.27.2
- Gitea 1.27.2 - lightweight self-hosted Git service (patch update from 1.27.0). Security fixes to collaborator access-mode handling and HTTP signature verification, external renderer and markup rendering hardening, per-request WebAuthn user verification, and resolution of pull_request_target reusable workflows at the base commit. Automatic schema migration on start
- Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com
- Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base
Additional details
Usage instructions
- Launch instance (t3.small recommended)
- Open Security Group - allow TCP 443 and TCP 2222 from your IP
- SSH: ssh -i key.pem ubuntu@<PUBLIC_IP>
- Read credentials: sudo cat /root/gitea-credentials.txt
- Open https://<PUBLIC_IP> in your browser - accept the self-signed certificate warning
- Log in with admin credentials from the credentials file
Admin password equals the EC2 Instance ID. Credentials are saved to /root/gitea-credentials.txt at first boot. Certbot (with the nginx plugin) is pre-installed. Replace the self-signed TLS certificate with a CA-signed certificate for production use: sudo certbot --nginx -d your.domain.com
Resources
Vendor resources
Support
Vendor support
Visit us online: https://lynxroute.com
For Gitea upstream issues (bugs, features, repository behavior): https://github.com/go-gitea/gitea/issues
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
This product has charges associated with it for Websoft9 support. Pre-configured, web-based, cloud-native, secure, one-click to deploy Gitea open source with Websoft9 Applications Hosting Platform on AWS. Gitea is The lite DevOps platform, used for Code Repository and Pipeline.
This product is associated with charges for a standard one-click install solution for Gitea 1.21.5, a free and open-source Git service with a web interface running on a classical Linux stack. The AMI comes pre-installed with NGINX web server, MariaDB for MySQL database, Git version control system, and includes an integrated unlock system for secure access. The solution is deployed on Amazon Linux 2023 with automated configuration, database migration, systemd service management, and features secure password generation for both database and admin accounts.
A lightweight, high-performance self-hosted Git service and DevOps platform, pre-configured on a secured CentOS 9 environment with enterprise support by ThinkCloud.
This product has charges associated with it for Websoft9 support. Pre-configured, web-based, cloud-native, secure, one-click to deploy code-server with Websoft9 Applications Hosting Platform on AWS. code-server is a web based IDE that run VS Code, used for Code Repository, Web IDE.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.