Running on AWS · ap-southeast-2
Something small,
built properly.
This page is served from a single EC2 instance. No public ports are open on it — traffic arrives over an outbound tunnel and every request reaches you over TLS.
About
A starting point rather than a finished product. The markup is plain HTML and CSS with
no build step, so edit /var/www/site/index.html, reload, and the change is live.
Stack
-
Amazon EC2
Ubuntu 26.04 in Sydney. The instance has no inbound HTTP — only SSH.
-
Cloudflare Tunnel
cloudflareddials out to the Cloudflare edge, so the origin stays unreachable from the public internet. -
Let's Encrypt
The origin certificate is a real ACME-issued cert, renewed automatically, validated through the tunnel itself.
-
nginx
Bound to
127.0.0.1only, serving static files and redirecting HTTP to HTTPS.
Contact
Replace this line with your own email or links.