From d276c680d9b94b5c638078ce734f853811eb09fa Mon Sep 17 00:00:00 2001
From: xeruf <27jf@pm.me>
Date: Tue, 8 Nov 2022 10:33:31 +0000
Subject: [PATCH] code: add ssh redirection for gitea

---
 basic/apps/code/gitea-values-configmap.yaml   |  3 +++
 basic/config/kube-system/metallb-gitea.yaml   | 20 +++++++++++++++++++
 .../kustomizations/kube-system-config.yaml    | 19 ++++++++++++++++++
 3 files changed, 42 insertions(+)
 create mode 100644 basic/config/kube-system/metallb-gitea.yaml
 create mode 100644 basic/infrastructure/kustomizations/kube-system-config.yaml

diff --git a/basic/apps/code/gitea-values-configmap.yaml b/basic/apps/code/gitea-values-configmap.yaml
index 8afaf09..a45f9ff 100644
--- a/basic/apps/code/gitea-values-configmap.yaml
+++ b/basic/apps/code/gitea-values-configmap.yaml
@@ -29,6 +29,9 @@ data:
       config:
         server:
           ROOT_URL: "https://code.${domain}"
+          # START_SSH_SERVER: true
+        service:
+          DISABLE_REGISTRATION: true
         log:
           LEVEL: "Trace"
     persistence:
diff --git a/basic/config/kube-system/metallb-gitea.yaml b/basic/config/kube-system/metallb-gitea.yaml
new file mode 100644
index 0000000..90759f9
--- /dev/null
+++ b/basic/config/kube-system/metallb-gitea.yaml
@@ -0,0 +1,20 @@
+---
+# https://metallb.org/usage/
+#apiVersion: metallb.io/v1beta1
+apiVersion: v1
+kind: Service
+metadata:
+  name: gitea-ssh
+  namespace: kube-system
+  annotations:
+    #metallb.universe.tf/allow-shared-ip: "key-to-share-1.2.3.4"
+spec:
+  type: LoadBalancer
+  loadBalancerIP: "${ip_address}"
+  ports:
+    - name: ssh
+      protocol: SSH
+      port: 22
+      targetPort: 22
+  selector:
+    app: gitea
diff --git a/basic/infrastructure/kustomizations/kube-system-config.yaml b/basic/infrastructure/kustomizations/kube-system-config.yaml
new file mode 100644
index 0000000..62b6cb1
--- /dev/null
+++ b/basic/infrastructure/kustomizations/kube-system-config.yaml
@@ -0,0 +1,19 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+kind: Kustomization
+metadata:
+  name: kube-system-config
+  namespace: flux-system
+spec:
+  interval: 1h
+  timeout: 20m
+  dependsOn:
+    - name: metallb
+  sourceRef:
+    kind: GitRepository
+    name: stackspout
+  path: ./basic/config/kube-system
+  prune: true
+  postBuild:
+    substituteFrom:
+      - kind: Secret
+        name: stackspin-cluster-variables