fix: open preview security groups by default

Co-Authored-By: Codex <codex@openai.com>
2026-07-26 19:11:41 +02:00
parent 21a80f025f
commit 90906a3c78
2 changed files with 23 additions and 23 deletions
@@ -177,7 +177,7 @@ pp:previewId = <Preview.id>

 **EC2 setup per preview:**
 1. Generate an ephemeral RSA key pair. Store the private key encrypted in `Preview.sshPrivateKey`. Import the public key to AWS as `pp-preview-<previewId>` and store the name in `Preview.sshKeyName`.
-2. Create a security group named `pp-preview-<previewId>` in the default VPC. Allow inbound: TCP 22 (SSH) and TCP `<port>` from `0.0.0.0/0`.
+2. Create a security group named `pp-preview-<previewId>` in the default VPC. Allow inbound: all traffic from `0.0.0.0/0` and `::/0` (all protocols, including ICMP, and all ports).
 3. Launch instance:
   - AMI: Ubuntu 22.04 LTS (hardcode a per-region AMI map, or resolve via SSM `resolve:ssm:/aws/service/canonical/ubuntu/server/22.04/stable/current/amd64/hvm/ebs-gp2/ami-id`)
   - Instance type from `RepoConfig.instanceType`