From f7786f3e193fea31a39196ba204e73870bb43b91 Mon Sep 17 00:00:00 2001
From: Ryan Moon <moonryan2009@gmail.com>
Date: Thu, 2 Apr 2026 18:34:29 -0500
Subject: [PATCH] fix: route Gitea SSH through nginx ingress LB instead of
 separate LoadBalancer

---
 gitea/values.yaml         | 4 ++--
 ingress/tcp-services.yaml | 7 +++++++
 2 files changed, 9 insertions(+), 2 deletions(-)
 create mode 100644 ingress/tcp-services.yaml

diff --git a/gitea/values.yaml b/gitea/values.yaml
index 556127a..8ec3892 100644
--- a/gitea/values.yaml
+++ b/gitea/values.yaml
@@ -63,11 +63,11 @@ persistence:
 
 service:
   ssh:
-    type: LoadBalancer
+    type: ClusterIP
     port: 22
     annotations:
-      service.beta.kubernetes.io/do-loadbalancer-name: "gitea-ssh"
       external-dns.alpha.kubernetes.io/hostname: git2-ssh.lunarfront.tech
+      external-dns.alpha.kubernetes.io/target: "167.99.21.170"
 
 ingress:
   enabled: true
diff --git a/ingress/tcp-services.yaml b/ingress/tcp-services.yaml
new file mode 100644
index 0000000..712645e
--- /dev/null
+++ b/ingress/tcp-services.yaml
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: tcp-services
+  namespace: ingress-nginx
+data:
+  "22": "gitea/gitea-ssh:22"