☁ CLOUD INFRASTRUCTURE

web-server-vm

A production-hardened Nginx server, provisioned and secured end-to-end on Azure — from empty subscription to public-facing endpoint.

Live & operational 📍 UK South 51.132.236.1 $0.1160/hr est.

Request path

Public Internetingress

HTTP/HTTPS clients worldwide

→ tcp/443, tcp/80

Network Security Groupfirewall

Stateful allowlist · SSH key-only · default-deny inbound

→ filtered traffic only

Public IP51.132.236.1

Static · UK South · standard SKU

→ webApp-vnet

VNet / Subnet10.0.0.0/16

webApp-vnet → public-subnet · 10.0.1.0/24

→ NIC binding

Ubuntu 24.04 LTS VMStandard_D2s_v3

2 vCPU · 8 GiB RAM · hardened SSH, Fail2Ban active

→ localhost:80

Nginxserving

Systemd-managed · starts on boot · serves this page

ComputeVM

SizeStandard_D2s_v3

OSUbuntu 24.04 LTS

RegionUK South

NetworkVNet

VNetwebApp-vnet

Address space10.0.0.0/16

Subnetpublic-subnet

Subnet range10.0.1.0/24

Security postureNSG

✓ Password authentication disabled — SSH keys only

✓ Root login disabled at the SSH daemon

✓ Fail2Ban actively banning brute-force attempts

✓ Inbound traffic default-deny, allowlist only