proxy

Go to file

Sienna Meridian Satterwhite e5b6802107

feat(proxy): add SSH TCP passthrough and graceful HTTP-only startup

Add optional [ssh] config block that proxies port 22 → Gitea SSH pod,
running on a dedicated thread/runtime matching the cert-watcher pattern.

Also start HTTP-only on first deploy when the TLS cert file doesn't exist
yet — once ACME challenge completes and the cert watcher writes the file,
a graceful upgrade adds the TLS listener without downtime.

Fix ACME watcher to handle InitApply events (kube-runtime v3+) so
Ingresses that existed before the proxy started are picked up correctly.

Signed-off-by: Sienna Meridian Satterwhite <sienna@sunbeam.pt>

2026-03-10 23:38:19 +00:00

src

feat(proxy): add SSH TCP passthrough and graceful HTTP-only startup

2026-03-10 23:38:19 +00:00

tests

fix(proxy): forward X-Forwarded-Proto via insert_header; add e2e test

2026-03-10 23:38:19 +00:00

.dockerignore

feat: initial sunbeam-proxy implementation

2026-03-10 23:38:19 +00:00

.gitignore

feat: initial sunbeam-proxy implementation