Files
QuantEngineByItz/docs/SYNOLOGY_SNAPSHOT_ADMIN_FIREWALL_PROXY_COPYPASTE.md
kjh2064 af1236202d WBS-7.3: GAS→Python 마이그레이션 5개 항목 완료 (F14, F02-F06)
- F14: late_chase_risk_score 검증
  * GAS가 유일한 생산처 (Python canonical 없음)
  * migration_action: KEEP_IN_GAS로 정정, status: DONE

- F02/F03/F04/F06: priceBasis 로직 포팅
  * formulas/price_basis_v1.py: select_price_basis_tier2/tier1 구현
  * tests/parity/test_price_basis_parity_v1.py: 8 parity 테스트 (모두 PASS)
  * GAS Number.isFinite() 의미론 정확히 재현 (math.isfinite 사용)
  * 모든 테스트 112/112 PASS

남은 작업 (4개):
- F05: decision_logic (action assignment)
- F07: score_logic (threshold addition)
- F10: routing decision
- F15: late_chase_gate

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
2026-06-22 22:45:00 +09:00

775 B

Synology Snapshot Admin Firewall and Reverse Proxy Copy-Paste

Use these values verbatim in DSM.

Reverse proxy

  • Rule name: snapshot-admin
  • Source protocol: HTTPS
  • Source hostname: admin.example.com
  • Source port: 443
  • Source path: /
  • Destination protocol: HTTP
  • Destination hostname: 127.0.0.1
  • Destination port: 8787

Firewall

  • Allow: 443/TCP from WAN or trusted CIDR
  • Deny: 8787/TCP from WAN
  • Optional allow: 443/TCP from office/VPN CIDR only

Certificate binding

  • Hostname: admin.example.com
  • Bind to: reverse proxy rule snapshot-admin

Notes

  • Do not expose 8787/TCP directly.
  • Keep Basic Auth enabled in the Python service.
  • Use 127.0.0.1 for the destination host unless direct-bind testing is intentional.