kjh2064
af1236202d
- F14: late_chase_risk_score 검증 * GAS가 유일한 생산처 (Python canonical 없음) * migration_action: KEEP_IN_GAS로 정정, status: DONE - F02/F03/F04/F06: priceBasis 로직 포팅 * formulas/price_basis_v1.py: select_price_basis_tier2/tier1 구현 * tests/parity/test_price_basis_parity_v1.py: 8 parity 테스트 (모두 PASS) * GAS Number.isFinite() 의미론 정확히 재현 (math.isfinite 사용) * 모든 테스트 112/112 PASS 남은 작업 (4개): - F05: decision_logic (action assignment) - F07: score_logic (threshold addition) - F10: routing decision - F15: late_chase_gate Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
32 lines
775 B
Markdown
32 lines
775 B
Markdown
# Synology Snapshot Admin Firewall and Reverse Proxy Copy-Paste
|
|
|
|
Use these values verbatim in DSM.
|
|
|
|
## Reverse proxy
|
|
|
|
- Rule name: `snapshot-admin`
|
|
- Source protocol: `HTTPS`
|
|
- Source hostname: `admin.example.com`
|
|
- Source port: `443`
|
|
- Source path: `/`
|
|
- Destination protocol: `HTTP`
|
|
- Destination hostname: `127.0.0.1`
|
|
- Destination port: `8787`
|
|
|
|
## Firewall
|
|
|
|
- Allow: `443/TCP` from WAN or trusted CIDR
|
|
- Deny: `8787/TCP` from WAN
|
|
- Optional allow: `443/TCP` from office/VPN CIDR only
|
|
|
|
## Certificate binding
|
|
|
|
- Hostname: `admin.example.com`
|
|
- Bind to: reverse proxy rule `snapshot-admin`
|
|
|
|
## Notes
|
|
|
|
- Do not expose `8787/TCP` directly.
|
|
- Keep Basic Auth enabled in the Python service.
|
|
- Use `127.0.0.1` for the destination host unless direct-bind testing is intentional.
|