Laboratory compute gateway

Managed notebook services are exposed through a hardened HTTPS entrypoint.

This host presents a small public status surface while keeping authenticated notebook and proxy workloads separated behind system-managed services.

Environment

Ubuntu 24.04 research node with automatic TLS issuance, isolated services, and low-memory friendly components.

Notebook access, artifact browsing, and managed outbound connectivity are split across dedicated services and ports.

Administrative operations are separated from the public website surface and require dedicated credentials.