Conrad writes about our k8s plans for the SourceHut blog:
https://sourcehut.org/blog/2024-06-12-infrastructure-updates/
Conrad writes about our k8s plans for the SourceHut blog:
https://sourcehut.org/blog/2024-06-12-infrastructure-updates/
@drewdevault For SSH, I suggest to look into Headscale w/ ACLs. It can be used to launch an SSH session easily. It's DERP and hole punching help out with connectivity across the board; never had issues. This way no SSH ports need to be open to the public.
https://lab.allmende.io/-/snippets/440
With an ncat SOCKS5 proxy and Tailscale in the same pod with a desired service, this also runs fine in rootless mode.
If the discussion is about SSH for git, I guess it's a bit more tricky.