Extend traefik and gitea to be able to clone repositories via ssh.

development/docker-compose.yaml

@@ -26,6 +26,9 @@ services:
       - GITEA__database__NAME=gitea
       - GITEA__database__USER=gitea
       - GITEA__database__PASSWD=sadlkf0234lsdf
+      - GITEA__server__START_SSH_SERVER=true
+      - GITEA__server__SSH_PORT=22
+      - GITEA__server__SSH_LISTEN_PORT=222
     restart: unless-stopped
     volumes:
       - gitea:/data
@@ -49,6 +52,10 @@ services:
       - "traefik.http.routers.git-secure.tls.certresolver=myresolver"
       - "traefik.http.routers.git-secure.tls.domains[0].main=cs-git.ddnss.de"
       - "traefik.http.services.git-secure.loadbalancer.server.port=3000"
+      - "traefik.tcp.routers.git-ssh.entrypoints=ssh"
+      - "traefik.tcp.routers.git-ssh.rule=HostSNI(`*`)"
+      - "traefik.tcp.routers.git-ssh.service=git-ssh"
+      - "traefik.tcp.services.git-ssh.loadbalancer.server.port=222"
 
   nginx-kimai:
     image: nginx:alpine

docker-compose.yaml

@@ -39,6 +39,7 @@ services:
       - --providers.docker.swarmMode=false
       - --entryPoints.web.address=:80
       - --entryPoints.websecure.address=:443
+      - --entryPoints.ssh.address=:222/tcp
       - --certificatesresolvers.myresolver.acme.tlschallenge=true
 #      - --certificatesresolvers.myresolver.acme.caserver=https://acme-staging-v02.api.letsencrypt.org/directory
       - --certificatesresolvers.myresolver.acme.email=christiansteinle@arcor.de
@@ -49,6 +50,7 @@ services:
     ports:
       - "80:80"
       - "443:443"
+      - "222:222"
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro
       - letsencrypt:/letsencrypt