geir/home-lab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Change Git SSH port from 1337 to 2222

Browse source 
- Port 1337 appears to be blocked by VPS provider
- Port 2222 is more commonly allowed for SSH services
- Update both reverse-proxy and Forgejo configurations
- This should resolve the SSH timeout issues
This commit is contained in:
Geir Okkenhaug Jerstad 2025-06-10 22:42:13 +02:00
parent f2c9eed794
commit 1f222f2997
2 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
machines/grey-area/services/forgejo.nix
View file

@ -15,7 +15,7 @@
server = { server = {
ROOT_URL = "https://git.geokkjer.eu"; ROOT_URL = "https://git.geokkjer.eu";
SSH_DOMAIN = "git.geokkjer.eu"; SSH_DOMAIN = "git.geokkjer.eu";
SSH_PORT = 1337; SSH_PORT = 2222;
# Use system SSH server instead of built-in # Use system SSH server instead of built-in
DISABLE_SSH = false; DISABLE_SSH = false;
START_SSH_SERVER = false; START_SSH_SERVER = false;

6
machines/reverse-proxy/configuration.nix
View file

@ -19,9 +19,9 @@
# DMZ-specific firewall configuration - simplified for testing # DMZ-specific firewall configuration - simplified for testing
networking.firewall = { networking.firewall = {
enable = true; enable = true;
# Allow HTTP/HTTPS from external network and Git SSH on port 1337 # Allow HTTP/HTTPS from external network and Git SSH on port 2222
# Temporarily allow SSH from everywhere - rely on fail2ban for protection # Temporarily allow SSH from everywhere - rely on fail2ban for protection
allowedTCPPorts = [ 22 80 443 1337 ]; allowedTCPPorts = [ 22 80 443 2222 ];
allowedUDPPorts = [ ]; allowedUDPPorts = [ ];
# Explicitly block all other traffic # Explicitly block all other traffic
rejectPackets = true; rejectPackets = true;
@ -81,7 +81,7 @@
} }
server { server {
listen 1337; listen 2222;
proxy_pass git_ssh_backend; proxy_pass git_ssh_backend;
proxy_timeout 300s; proxy_timeout 300s;
proxy_connect_timeout 10s; proxy_connect_timeout 10s;