Caddy and forgejo

robber , 2 hours ago (edited 2 hours ago)

IIRC there is a plugin for Caddy that can do what you are looking for.

Edit: here you go

wireless_purposely832 , 10 minutes ago

This would only work if there is no other traffic on the port being used (eg: port 22). If both the host SSH service and Forgejo SSH service expect traffic on port 22, then this would not work since server name indication (SNI) is not provided with SSH traffic and Caddy would not be able to identify the appropriate destination for multiple SSH services traffic.

AsudoxDev , 3 hours ago

Afaik you can reverse proxy the ssh connection. I’ve been connecting to my server using the domain and tld (asudox.dev)

wireless_purposely832 , 15 minutes ago

Are you able to provide some details on how you are doing this? I don’t think you can do much with reverse proxies and SSH beyond routing all traffic on port 22 (or the configured SSH port) to whichever port SSH is listening on. In other words, the reverse proxy cannot route SSH traffic for the host on port 22 to the host, route SSH traffic for Forgejo on port 22 to Forgejo’s SSH process, and SFTP traffic on port 22 to the SFTP process - at least not via domain name like a HTTP/HTTPS reverse proxy would work.

Instead, this would need to be done via IP address where the host SSH process listens on 192.168.1.2, the Forgejo SSH process listens on 192.168.1.3, and the SFTP process listens on 192.168.4. Otherwise, each of those services would need to use different ports.

slouching_employer , 22 minutes ago

If both Caddy and Forgejo are running in Docker containers you could do SSH Container Passthrough.

Link is to Gitea docs but should work fine with Forgejo.

possiblylinux127 , 1 hour ago

I don’t think you can with caddy

Decronym Bot , 2 hours ago (edited 9 minutes ago)

Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:

Fewer Letters	More Letters
DNS	Domain Name Service/System
Git	Popular version control system, primarily for code
HTTP	Hypertext Transfer Protocol, the Web
HTTPS	HTTP over SSL
IP	Internet Protocol
SFTP	Secure File Transfer Protocol for encrypted file transfer, over SSH
SSH	Secure Shell for remote terminal access
SSL	Secure Sockets Layer, for transparent encryption
nginx	Popular HTTP server

---

8 acronyms in this thread; the most compressed thread commented on today has 16 acronyms.

[Thread #962 for this sub, first seen 10th Sep 2024, 12:25] [FAQ] [Full list] [Contact] [Source code]

nottelling , 3 hours ago (edited 3 hours ago)

You don’t. That’s not what caddy is. Use a bastion for ssh.

Edit: link www.redhat.com/…/ssh-proxy-bastion-proxyjump

haui_lemmy , 3 hours ago

I dont know about caddy but nginx proxy manager does this very well. Also, if running in docker, you can expose the port that runs ssh for forgejo und a different port than the host machine‘s (eg 2222). In that case you just put the remote in with the port and call it a day.

Strit , 4 hours ago

If you connect from outside your LAN, you would need to forward the ssh port to the server in your router settings. If you are inside the LAN, just use the ip address of the forgejo server.