feat(dns): add git.riotpiao.com subdomain for Forgejo SSH access

Adds CoreDNS rewrite: git.riotpiao.com → forgejo-gitea-ssh.cicd.svc.cluster.local

Separates SSH from HTTPS access:
  - forgejo.riotpiao.com → HTTPS/Web UI (192.168.1.160, ingress)
  - git.riotpiao.com → SSH (192.168.1.165:2222, LoadBalancer)

Usage:
  git remote set-url origin ssh://[email protected]:2222/riotpiao.com/homelab.git
  git push

External access requires /etc/hosts entry:
  192.168.1.165  git.riotpiao.com
This commit is contained in:
Story Crater Bot
2026-08-18 15:08:03 -07:00
parent 8b4a5ad129
commit 1f97d744f6
@@ -41,6 +41,7 @@ data:
# port 3000, so containerd image pulls (which use https/:443) get
# `dial tcp <clusterIP>:443: i/o timeout`. SSH stays on its own LB service.
rewrite name forgejo.riotpiao.com ingress-nginx-controller.ingress-nginx.svc.cluster.local
rewrite name git.riotpiao.com forgejo-gitea-ssh.cicd.svc.cluster.local
# Rewrite homelab hostnames to the nginx ingress controller so in-cluster pods
# hit nginx TLS termination (cert-manager cert) and preserve the Host header.