From 73e253a579a7cc6d1b90770916404ea793efbbb5 Mon Sep 17 00:00:00 2001
From: Danijel Simeunovic <danijel.simeunovic@fortedigital.com>
Date: Sun, 19 Apr 2026 13:27:59 +0200
Subject: [PATCH] traefik

---
 infra/values/base/traefik-values.yaml    | 25 ++++++++++++++++++++++++
 infra/values/upc-dev/traefik-values.yaml |  7 +++++++
 2 files changed, 32 insertions(+)

diff --git a/infra/values/base/traefik-values.yaml b/infra/values/base/traefik-values.yaml
index 0df67ba..2c33e0a 100644
--- a/infra/values/base/traefik-values.yaml
+++ b/infra/values/base/traefik-values.yaml
@@ -2,6 +2,8 @@ providers:
   kubernetesIngress:
     publishedService: # Fixes ArgoCD health checks for LoadBalancer services
       enabled: true
+  kubernetesCRD:
+    allowCrossNamespace: true
 deployment:
   replicas: 2
 
@@ -48,3 +50,26 @@ ports:
       accessLogs: true
       metrics: true
       tracing: true
+
+  gitea-ssh:
+    port: 2222
+    expose:
+      default: true
+    exposedPort: 2222
+    protocol: TCP
+
+# -- IngressRouteTCP for Gitea SSH (cross-namespace to gitea/gitea-ssh service)
+extraObjects:
+- apiVersion: traefik.io/v1alpha1
+  kind: IngressRouteTCP
+  metadata:
+    name: gitea-ssh
+  spec:
+    entryPoints:
+    - gitea-ssh
+    routes:
+    - match: HostSNI(`*`)
+      services:
+      - name: gitea-ssh
+        namespace: gitea
+        port: 22
diff --git a/infra/values/upc-dev/traefik-values.yaml b/infra/values/upc-dev/traefik-values.yaml
index 31f07f4..738cb39 100644
--- a/infra/values/upc-dev/traefik-values.yaml
+++ b/infra/values/upc-dev/traefik-values.yaml
@@ -10,6 +10,10 @@ service:
               {
                   "name": "websecure",
                   "mode": "tcp"
+              },
+              {
+                  "name": "gitea-ssh",
+                  "mode": "tcp"
               }
           ],
           "backends": [
@@ -24,6 +28,9 @@ service:
                   "properties": {
                       "outbound_proxy_protocol": "v2"
                   }
+              },
+              {
+                  "name": "gitea-ssh"
               }
           ]
       }