From c2e72b0ec8d6b3661950d626706a2655717288ee Mon Sep 17 00:00:00 2001
From: Alexander Rogov <i_am@rogov.al>
Date: Fri, 12 Jun 2026 20:20:47 +0300
Subject: [PATCH] add 22 port to nlb for gitea

---
 argocd/apps/traefik.yaml              |  5 +++++
 manifests/gitea/ingressroute-ssh.yaml | 13 +++++++++++++
 2 files changed, 18 insertions(+)
 create mode 100644 manifests/gitea/ingressroute-ssh.yaml

diff --git a/argocd/apps/traefik.yaml b/argocd/apps/traefik.yaml
index 01ea54a..77e64cf 100644
--- a/argocd/apps/traefik.yaml
+++ b/argocd/apps/traefik.yaml
@@ -30,6 +30,7 @@ spec:
           - "--ping=true"
           - "--metrics.prometheus=true"
           - "--metrics.prometheus.entrypoint=metrics"
+          - "--entryPoints.ssh.address=:2222/tcp"
           - "--providers.kubernetesingress.ingressclass=traefik"
           - "--providers.kubernetesingress.ingressendpoint.publishedservice=traefik/traefik"
           - "--accesslog=true"
@@ -48,6 +49,10 @@ spec:
           websecure:
             port: 8443
             exposedPort: 443
+          ssh:
+            port: 2222
+            exposedPort: 22
+            protocol: TCP
           metrics:
             port: 9100
             expose:
diff --git a/manifests/gitea/ingressroute-ssh.yaml b/manifests/gitea/ingressroute-ssh.yaml
new file mode 100644
index 0000000..01bcb9f
--- /dev/null
+++ b/manifests/gitea/ingressroute-ssh.yaml
@@ -0,0 +1,13 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRouteTCP
+metadata:
+  name: gitea-ssh
+  namespace: gitea
+spec:
+  entryPoints:
+    - ssh
+  routes:
+    - match: HostSNI(`*`)
+      services:
+        - name: gitea
+          port: 22