route gitea ssh through traefik

system/virtualization/containers/gitea/default.nix

@@ -8,8 +8,6 @@
     config = lib.mkIf config.sysconfig.containers.gitea.enable {
 
         networking = {
-            hosts."192.168.100.20" = [ "gitea.esotericbytes.com" ];
-
             nat.internalInterfaces = [ "ve-gitea" ];
         };
         
@@ -17,10 +15,6 @@
             "gitea/dbpass" = {};
         };
 
-        networking.firewall.allowedTCPPorts = [
-            2222
-        ];
-
         containers.gitea = {
 
             autoStart = true;
@@ -28,13 +22,6 @@
             hostAddress = "192.168.100.10";
             localAddress = "192.168.100.20";
 
-            forwardPorts = [
-                {
-                    containerPort = 2222;
-                    hostPort = 2222;
-                }
-            ];
-
             bindMounts = {
                 "/etc/gitea/data" = {
                     hostPath = "/ssd1/Gitea/data";

system/virtualization/docker/traefik/config/routing.yml

@@ -42,4 +42,17 @@ http:
       loadBalancer:
         servers: 
           - url: "http://192.168.100.20:3000"
-     
+
+tcp:
+  routers:
+    gitea-ssh:
+      entryPoints:
+        - "gitea-ssh"
+      rule: "HostSNI(`*`)"
+      service: "gitea-ssh"
+
+  services:
+    gitea-ssh:
+      loadBalancer:
+        servers:
+          - address: "192.168.100.20:2222"

system/virtualization/docker/traefik/config/traefik.yml

@@ -52,6 +52,8 @@ entryPoints:
           main: "esotericbytes.com"
           sans:
             - "*.esotericbytes.com" 
+  gitea-ssh:
+    address: ":2222"
 
 log: 
   level: "INFO"

system/virtualization/docker/traefik/default.nix

@@ -7,7 +7,7 @@
 
     config = lib.mkIf (config.sysconfig.docker.traefik.enable && config.sysconfig.docker.enable) {
             
-        networking.firewall.allowedTCPPorts = [ 80 81 443 444 ];
+        networking.firewall.allowedTCPPorts = [ 80 81 443 444 2222 ];
 
         sops.secrets = {
             "traefik/cf_email" = {};
@@ -60,6 +60,7 @@
                 "81:81"
                 "443:443"
                 "444:444"
+                "2222:2222"
             ];
 
             labels = {