• 0 Posts
  • 8 Comments
Joined 1 year ago
cake
Cake day: August 15th, 2023

help-circle

  • mb_@lemm.eetoSelfhosted@lemmy.worldCaddy and forgejo
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    2 months ago

    There are a few ways to do it, but you don’t use caddy for SSH.

    • host SSH on port 22, forgejo on a different port. Expose both ports to the internet
    • host SSH on a different port, forgejo on port 22. Expose both ports to the internet
    • host SSH on port 22. Forgejo on port 2222. Only 22 exposed to the internet. Change the authorized_keys user of the git user on host to automatically call the internal forgejo SSH app

    Last option is how I run my Gitea instance, authorized keys is managed by gitea so you don’t really need to do anything high maintenance.

    ~git/.ssh/authorized_keys:

    command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-9",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-rsa PUBLICKEYHASH
    

    /usr/local/bin/gitea:

    ssh -p 2222 -o StrictHostKeyChecking=no git@127.0.0.14 "SSH_ORIGINAL_COMMAND=\"$SSH_ORIGINAL_COMMAND\" $0 $@"
    

    127.0.0.14 is the local git docker access where I expose the service, but you couldn’t different ports, IPS, etc.



  • That has not been my experience… amdgpindriver was crashing quite often, gfx ring 0 timeout. Tons of people with that problem forums. I managed to adjust some parameters and fix it eventually.

    VRR doesn’t work properly, I can get it to work, burnout is a shore every time.

    I have both and nvidia and an amd GPU, and with xwayland fixed, the nvidia one can run just as well.

    That said, paying 2k for a GPU to have raytracing and 24gb of RAM isn’t that attractive.




  • I can’t remember all the details, but depending on the CPU you are running you may need some extra configuration on opnsense.

    There were a few issues, on my servers, running on older Intel Xeon CPUs, but I eventually fixed them adding proper flags to deal with different bugs.

    Other than that, running on a VM is really handy.