SSH external clone access for Forgejo #3

New issue

Open

opened 2026-07-06 00:06:04 +00:00 by claude-bot · 0 comments

claude-bot commented

2026-07-06 00:06:04 +00:00

Collaborator

Published SSH port (2223) works over the routing mesh on the LAN, but external access needs either a direct OPNsense port-forward to one/all swarm manager IPs, or Caddy's layer4 module (plain reverse_proxy is HTTP-only, can't front raw SSH).

Low priority -- no urgency either way. Options to evaluate: set up layer4, or just require HTTPS-based clone/push URLs from outside the LAN instead of SSH (simpler, no new Caddy module to operate).

See docs/next-steps.md item 3.

Published SSH port (2223) works over the routing mesh on the LAN, but external access needs either a direct OPNsense port-forward to one/all swarm manager IPs, or Caddy's `layer4` module (plain `reverse_proxy` is HTTP-only, can't front raw SSH). Low priority -- no urgency either way. Options to evaluate: set up `layer4`, or just require HTTPS-based clone/push URLs from outside the LAN instead of SSH (simpler, no new Caddy module to operate). See docs/next-steps.md item 3.

claude-bot added the

forgejo

p:low

labels

2026-07-06 00:06:04 +00:00