change forgejo ssh port

README.md

@@ -17,8 +17,6 @@ Seems to be a little annoying with all the docker stuff
 
 ### Gitea
 
-- Move to forgejo
-- Fix SSH port
 - Move over some repos
 - Setup automatic syncing
 - Use own git servers

roles/forgejo/files/docker-compose.yml

@@ -16,7 +16,7 @@ services:
       - traefik
     volumes:
       - /data/forgejo:/data
-      - /apps/forgejo/conf:/data/forgejo/conf
+      - /apps/forgejo/conf:/data/gitea/conf
       - /etc/timezone:/etc/timezone:ro
       - /etc/localtime:/etc/localtime:ro
     labels:
@@ -24,4 +24,10 @@ services:
       - traefik.http.routers.forgejo.rule=Host(`git.pizzapim.nl`)
       - traefik.http.routers.forgejo.tls=true
       - traefik.http.routers.forgejo.tls.certresolver=pizzapim
+      - traefik.tcp.routers.forgejo-ssh.service=forgejo
       - traefik.http.services.forgejo.loadbalancer.server.port=3000
+
+      - traefik.tcp.routers.forgejo-ssh.rule=HostSNI(`*`)
+      - traefik.tcp.routers.forgejo-ssh.entrypoints=ssh
+      - traefik.tcp.routers.forgejo-ssh.service=forgejo-ssh
+      - traefik.tcp.services.forgejo-ssh.loadbalancer.server.port=22

roles/forgejo/templates/app.ini

@@ -18,7 +18,7 @@ SSH_DOMAIN       = git.pizzapim.nl
 HTTP_PORT        = 3000
 ROOT_URL         = {{ forgejo.root_url }}
 DISABLE_SSH      = false
-SSH_PORT         = 2222
+SSH_PORT         = 56287
 SSH_LISTEN_PORT  = 22
 LFS_START_SERVER = true
 LFS_JWT_SECRET   = {{ forgejo.lfs_jwt_secret }}

roles/traefik/files/docker-compose.yml

@@ -17,6 +17,7 @@ services:
     ports:
       - "443:443"
       - "80:80"
+      - "56287:56287"
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
       - /apps/traefik/traefik.toml:/etc/traefik/traefik.toml

roles/traefik/files/traefik.toml

@@ -5,6 +5,8 @@ loglevel = "DEBUG"
   address = ":80"
   [entryPoints.websecure]
   address = ":443"
+  [entryPoints.ssh]
+  address = ":56287"
 
 [api]