Route raw TCP 2222 through the droplet edge for Forgejo SSH #49

Merged
parkerhdavis merged 1 commit from droplet-tcp-2222 into main 2026-10-12 21:30:15 -06:00
parkerhdavis commented 2026-10-12 21:30:12 -06:00 (Migrated from github.com)

Summary

Pangolin raw TCP resource routing needs two droplet-side pieces that the dashboard resource alone does not provide: the port published on the edge container, and a static trajik entrypoint named for the port (the pattern the old p4:1666 passthrough used, commit 22d5728). This adds both for Forgejo's git-over-SSH port:

  • 2222:2222/tcp on gerbil in docker-compose.droplet.yml
  • tcp-2222 entrypoint in pangolin/config/traefik/traefik_config.yml.template, replacing the stale tcp-1666 left over from the retired Perforce passthrough

The DigitalOcean firewall already admits 2222 (the port moved from timeout to connection-refused when the resource was created).

Verification

Deploy on the droplet: pull, make setup droplet to re-render the traefik static config, then restart gerbil (port binding) and force-recreate traefik (static config only loads at startup — the Hub's recreate warning). Verified afterwards by an SSH handshake to git@forge.parkerhdavis.com:2222.

## Summary Pangolin raw TCP resource routing needs two droplet-side pieces that the dashboard resource alone does not provide: the port published on the edge container, and a static trajik entrypoint named for the port (the pattern the old p4:1666 passthrough used, commit 22d5728). This adds both for Forgejo's git-over-SSH port: - `2222:2222/tcp` on gerbil in `docker-compose.droplet.yml` - `tcp-2222` entrypoint in `pangolin/config/traefik/traefik_config.yml.template`, replacing the stale `tcp-1666` left over from the retired Perforce passthrough The DigitalOcean firewall already admits 2222 (the port moved from timeout to connection-refused when the resource was created). ## Verification Deploy on the droplet: pull, `make setup droplet` to re-render the traefik static config, then restart gerbil (port binding) and force-recreate traefik (static config only loads at startup — the Hub's recreate warning). Verified afterwards by an SSH handshake to `git@forge.parkerhdavis.com:2222`.
Sign in to join this conversation.
No reviewers
No labels
No milestone
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
parker/cumulus!49
No description provided.