From 7fd3cdb06ecb147c7ceffcb4d4b507ceb8d356af Mon Sep 17 00:00:00 2001
From: David Young <david@federated.computer>
Date: Wed, 24 Jun 2026 10:22:19 -0600
Subject: [PATCH] GCP notes

---
 .../coreplatform/cores/provisioning-a-core.md |  2 +-
 .../reference/google-cloud-notes.md           | 63 +++++++++++++++++++
 2 files changed, 64 insertions(+), 1 deletion(-)
 create mode 100644 content/docs/coreplatform/reference/google-cloud-notes.md

diff --git a/content/docs/coreplatform/cores/provisioning-a-core.md b/content/docs/coreplatform/cores/provisioning-a-core.md
index 5a2ec0d..5afd3fd 100644
--- a/content/docs/coreplatform/cores/provisioning-a-core.md
+++ b/content/docs/coreplatform/cores/provisioning-a-core.md
@@ -26,7 +26,7 @@ Download the image format that matches your cloud provider's import requirements
 | Compressed raw (`.img.xz`) | [coreserver-enterprise-x86-26-05-12.img.xz](https://nginx.core-x86builder.federatedcomputer.cloud/coreserver-enterprise-x86-26-05-12.img.xz)         | DigitalOcean, Hetzner                   |
 | QCOW2 (`.qcow2`)           | [coreserver-enterprise-x86-26-05-12.qcow2](https://nginx.core-x86builder.federatedcomputer.cloud/coreserver-enterprise-x86-26-05-12.qcow2)           | KVM, QEMU, Proxmox, Contabo, Cloudstack |
 | Raw image (`.img`)         | [coreserver-enterprise-x86-26-05-12.img](https://nginx.core-x86builder.federatedcomputer.cloud/coreserver-enterprise-x86-26-05-12.img)               | AWS EC2, general use                    |
-| Compressed tar (`.tar.gz`) | [coreserver-enterprise-gcp-x86-26-06-24.tar.gz](https://nginx.core-x86builder.federatedcomputer.cloud/coreserver-enterprise-gcp-x86-26-06-24.tar.gz) | Google Cloud                            |
+| Compressed tar (`.tar.gz`) | [coreserver-enterprise-gcp-x86-26-06-24.tar.gz](https://nginx.core-x86builder.federatedcomputer.cloud/coreserver-enterprise-gcp-x86-26-06-24.tar.gz) | Google Cloud ([see notes...](coreplatform/reference/google-cloud-notes.md))                            |
 | VMDK (`.vmdk`)             | [coreserver-enterprise-x86-26-05-12.vmdk](https://nginx.core-x86builder.federatedcomputer.cloud/coreserver-enterprise-x86-26-05-12.vmdk)             | VMware (ESXi, vSphere), AWS EC2         |
 
 Import the image into your cloud provider and create a VM from it. Refer to your provider's documentation for the import process.
diff --git a/content/docs/coreplatform/reference/google-cloud-notes.md b/content/docs/coreplatform/reference/google-cloud-notes.md
new file mode 100644
index 0000000..e874a8b
--- /dev/null
+++ b/content/docs/coreplatform/reference/google-cloud-notes.md
@@ -0,0 +1,63 @@
+---
+weight: 193
+title: "Google Cloud Notes"
+description: "These are the steps for installing Core on Google Cloud Platform"
+icon: "article"
+date: "2025-05-27T00:00:00-00:00"
+lastmod: "2025-05-27T00:00:00-00:00"
+draft: false
+toc: true
+---
+
+Note: Customers using Google Cloud will need to provision using a **static IP**, the appropriate disk size, and make some adjustments to the firewall rules.
+
+Here are some sample "gcloud" command line instructions.
+
+- We set up the VM address...
+
+```
+gcloud compute addresses create coreserver-static-1 --region=us-central1
+```
+
+- We set up the VM instance using the CoreServer image, the disk size and using the address defined in the prior step...
+
+```
+gcloud compute instances create coreservernew1 \<br>
+      --zone=us-central1-a \<br>
+      --machine-type=e2-medium \<br>
+      --image=coreserver-gcp-x86-26-06-24 \<br>
+      --image-project=fed-project-name \<br>
+      --boot-disk-size=80G \<br>
+      --address=coreserver-static-1 \<br>
+      --metadata "ssh-keys=root:ssh-ed25519 YOUR_KEY_HERE root@core-provisioner"
+```
+You will also need to set the firewall rules as allowed in GCP.
+
+- We allow for DNS traffic on port 53.
+
+```
+gcloud compute firewall-rules create allow-dns \
+      --allow tcp:53,udp:53 \
+      --network default \
+      --description "Allow DNS traffic on port 53"
+```
+
+- Allow for HTTP and HTTPS traffic.
+
+```
+gcloud compute firewall-rules create allow-http-https \
+      --allow tcp:80,tcp:443 \  
+      --network default \
+      --description "Allow HTTP and HTTPS traffic"
+```
+
+- Finally, we allow ports for the email service. You need the email service so that installed apps can send messages to users.
+
+```
+gcloud compute firewall-rules create allow-mail \
+      --allow tcp:25,tcp:143,tcp:587,tcp:993,tcp:465,tcp:110,tcp:995 \
+      --network default \
+      --description "Allow mail ports SMTP, IMAP, POP3"
+```
+
+**Please reach out to us if you have any questions.**