forked from k-space/kube
The rootless image defaulted SSH_LISTEN_PORT to SSH_PORT until 1.26; in 1.27 docker-setup.sh leaves it empty, so Gitea fell back to SSH_PORT=22 and crash-looped with "listen tcp :22: bind: permission denied" as uid 1000. The Service already maps 22 -> 2222, so pin the listen port explicitly rather than depending on an image default. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Gitea
This application is managed by ArgoCD
Should ArgoCD be down manifests here can be applied with:
kustomize build . | kubectl apply -f -
Gitea DOES NOT go through Traefik. It has its own IP because ssh :22 would conflict with kube worker ssh. On its own IP, at the moment it doesn't flirt with Traefik — also has its own certificate.