Merge pull request 'gitea-playground' (#1) from gitea-playground into main

Reviewed-on: forust/homelab#1

gitea-docker-compose.yaml

@@ -5,17 +5,18 @@ services:
     environment:
       - USER_UID=1000
       - USER_GID=1000
+      # Database
       - GITEA__database__DB_TYPE=postgres
       - GITEA__database__HOST=db:5432
       - GITEA__database__NAME=gitea
       - GITEA__database__USER=gitea
       - GITEA__database__PASSWD=gitea
-      - GITEA__server__DOMAIN=gitea.forust.xyz
-      - GITEA__server__ROOT_URL=https://gitea.forust.xyz/
-      - GITEA__server__SSH_DOMAIN=gitea.forust.xyz
+      #Server
+      - GITEA__server__ROOT_URL=https://gitea.forust.xyz
+      - GITEA__server__SSH_PORT=2221
     restart: always
     networks:
-      - gitea
+      - gitea-db
       - traefik-proxy
     volumes:
       - ./gitea:/data
@@ -25,7 +26,7 @@ services:
       - "traefik.enable=true"
       - "traefik.docker.network=traefik-proxy"
     ports:
-      - "222:22"
+      - "2221:22"
     depends_on:
       - db
       
@@ -37,7 +38,7 @@ services:
       - POSTGRES_PASSWORD=gitea
       - POSTGRES_DB=gitea
     networks:
-      - gitea
+      - gitea-db
     volumes:
       - ./volumes/gitea/postgres:/var/lib/postgresql/data
       

traefik-docker-compose.yaml

@@ -21,6 +21,7 @@ services:
       - "--entryPoints.websecure.http.tls=true"
       - "--entryPoints.web.http.redirections.entryPoint.to=websecure"
       - "--entryPoints.web.http.redirections.entryPoint.scheme=https"
+      - "--entryPoints.ssh.address=:222"
       
       # Let's Encrypt STAGING. CURRENTLY USING CF ORIGIN CA INSTEAD
       # - "--certificatesresolvers.letsencrypt.acme.email=${EMAIL}"

traefik/dynamic/dynamic.yml

@@ -73,6 +73,14 @@ http:
         - security-headers
       tls: {}
 
+    # Gitea SSH
+    gitea-ssh:
+      rule: "HostSNI(`*`)"
+      entryPoints:
+        - ssh
+      service: gitea-ssh
+      tls: {}
+
     # Glance (local only)
     glance:
       rule: "Host(`glance.workstation`)"
@@ -162,6 +170,13 @@ http:
         servers:
           - url: "http://gitea:3000"
 
+    # Gitea SSH
+    gitea-ssh:
+      loadBalancer:
+        servers:
+          - url: "ssh://gitea:22"
+
+
   serversTransports:
     insecureTransport:
       insecureSkipVerify: true