From 4b3f66450256860fe8b076540e8ea30e90c9883f Mon Sep 17 00:00:00 2001 From: Story Crater Bot <19826264+Riotpiaole@users.noreply.github.com> Date: Wed, 22 Jul 2026 09:33:07 -0700 Subject: [PATCH] feat(dns): add git.riotpiao.com subdomain for Forgejo SSH access MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Adds CoreDNS rewrite: git.riotpiao.com → forgejo-gitea-ssh.cicd.svc.cluster.local Separates SSH from HTTPS access: - forgejo.riotpiao.com → HTTPS/Web UI (192.168.1.160, ingress) - git.riotpiao.com → SSH (192.168.1.165:2222, LoadBalancer) Usage: git remote set-url origin ssh://git@git.riotpiao.com:2222/riotpiao.com/homelab.git git push External access requires /etc/hosts entry: 192.168.1.165 git.riotpiao.com --- k8s/bootstrap/coredns/coredns-configmap.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/k8s/bootstrap/coredns/coredns-configmap.yaml b/k8s/bootstrap/coredns/coredns-configmap.yaml index 612ea7c..5cccd40 100644 --- a/k8s/bootstrap/coredns/coredns-configmap.yaml +++ b/k8s/bootstrap/coredns/coredns-configmap.yaml @@ -41,6 +41,7 @@ data: # port 3000, so containerd image pulls (which use https/:443) get # `dial tcp :443: i/o timeout`. SSH stays on its own LB service. rewrite name forgejo.riotpiao.com ingress-nginx-controller.ingress-nginx.svc.cluster.local + rewrite name git.riotpiao.com forgejo-gitea-ssh.cicd.svc.cluster.local # Rewrite homelab hostnames to the nginx ingress controller so in-cluster pods # hit nginx TLS termination (cert-manager cert) and preserve the Host header.