route gitea ssh through traefik

system/virtualization/docker/traefik/config/routing.yml

@@ -42,4 +42,17 @@ http:
       loadBalancer:
         servers: 
           - url: "http://192.168.100.20:3000"
-     
+
+tcp:
+  routers:
+    gitea-ssh:
+      entryPoints:
+        - "gitea-ssh"
+      rule: "HostSNI(`*`)"
+      service: "gitea-ssh"
+
+  services:
+    gitea-ssh:
+      loadBalancer:
+        servers:
+          - address: "192.168.100.20:2222"

system/virtualization/docker/traefik/config/traefik.yml

@@ -52,6 +52,8 @@ entryPoints:
           main: "esotericbytes.com"
           sans:
             - "*.esotericbytes.com" 
+  gitea-ssh:
+    address: ":2222"
 
 log: 
   level: "INFO"

system/virtualization/docker/traefik/default.nix

@@ -7,7 +7,7 @@
 
     config = lib.mkIf (config.sysconfig.docker.traefik.enable && config.sysconfig.docker.enable) {
             
-        networking.firewall.allowedTCPPorts = [ 80 81 443 444 ];
+        networking.firewall.allowedTCPPorts = [ 80 81 443 444 2222 ];
 
         sops.secrets = {
             "traefik/cf_email" = {};
@@ -60,6 +60,7 @@
                 "81:81"
                 "443:443"
                 "444:444"
+                "2222:2222"
             ];
 
             labels = {