feat: reverse proxy configuration for gitea

- https://...
- ssh@...:2222

group_vars/all/plain.yml

@@ -89,21 +89,21 @@ https_port: "443"
 service_port: "8080"
 management_port: "8081"
 
-service_port_cadvisor: "8080"
-service_port_elasticsearch: "9200"
-service_port_iam: "8082"
-service_port_webdav: "8080"
-service_port_keycloak: "8080"
-service_port_kibana: "5601"
-service_port_logstash: "5044"
 service_port_mssql: "1433"
+service_port_git: "2222"
 service_port_mysql: "3306"
-service_port_node_exporter: "9100"
+service_port_logstash: "5044"
 service_port_postgres: "5432"
-service_port_portainer: "9000"
+service_port_kibana: "5601"
+service_port_cadvisor: "8080"
+service_port_webdav: "8080"
+service_port_keycloak: "8080"
+service_port_iam: "8082"
+service_port_sonarqube: "9000"
 service_port_pgadmin: "9001"
 service_port_phpmyadmin: "9002"
-service_port_sonarqube: "9000"
+service_port_node_exporter: "9100"
+service_port_elasticsearch: "9200"
 
 monitor_port_system: "9082"
 monitor_port_docker: "9083"

roles/gitea/vars/main.yml

@@ -15,6 +15,11 @@ gitea_labels: [
   '"traefik.http.routers.{{ gitea_id }}-admin.tls=true"',
   '"traefik.http.routers.{{ gitea_id }}-admin.tls.certresolver=letsencrypt"',
   '"traefik.http.services.{{ gitea_id }}-admin.loadbalancer.server.port=3000"',
+
+  '"traefik.tcp.routers.{{ gitea_id }}-git.service={{ gitea_id }}-git"',
+  '"traefik.tcp.routers.{{ gitea_id }}-git.rule=HostSNI(`*`)"',
+  '"traefik.tcp.routers.{{ gitea_id }}-git.entrypoints=git"',
+  '"traefik.tcp.services.{{ gitea_id }}-git.loadbalancer.server.port=22"',
 ]
 
 gitea_environment: [
@@ -30,10 +35,6 @@ gitea_environment: [
 
 gitea_docker: {
   networks: [
-    {
-      name: back-tier,
-      external: true,
-    },
     {
       name: front-tier,
       external: true,
@@ -58,19 +59,8 @@ gitea_docker: {
         '"/etc/localtime:/etc/localtime:ro"',
       ],
       networks: [
-        '"back-tier"',
         '"front-tier"',
-      ],
+      ]
-      ports: [
-        {
-          "external": "3000",
-          "internal": "3000",
-        },
-        {
-          "external": "2222",
-          "internal": "22",
-        },
-      ],
       extra_hosts: "{{ gitea_extra_hosts | default([]) }}",
     }
   ],

roles/traefik/vars/main.yml

@@ -37,8 +37,8 @@ traefik_docker: {
           internal: "{{ https_port }}"
         },
         {
-          external: "0.0.0.0:{{ service_port_portainer }}",
+          external: "0.0.0.0:{{ service_port_git }}",
-          internal: "{{ service_port_portainer }}"
+          internal: "{{ service_port_git }}"
         },
         {
           external: "0.0.0.0:{{ service_port_pgadmin }}",

templates/traefik/traefik.toml.j2

@@ -38,12 +38,9 @@
   [entryPoints.websecure]
     address = ":{{ https_port }}"
 
-  ### portainer as a service for the host ###
+  ### git/ssh as a service for the host ###
-  [entryPoints.service-portainer ]
+  [entryPoints.git ]
-    address = ":{{ service_port_portainer }}"
+    address = ":{{ service_port_git }}"
-    [entryPoints.service-portainer.http.redirections.entryPoint]
-      to = "service-portainer"
-      scheme = "https"
 
   ### mysql admin service for the host ###
   [entryPoints.admin-mysql]