apiVersion: traefik.io/v1alpha1 kind: IngressRouteTCP metadata: name: gitea-ssh namespace: devops # Ensure this is your Gitea namespace spec: entryPoints: - ssh # This MUST match the name used in your Traefik config routes: - match: HostSNI(`*`) services: - name: gitea-ssh # Replace with the service name from Step 1 port: 22