Actual allow traffic

Signed-off-by: Martyn Ranyard <m@rtyn.berlin>

docker/ssh/Dockerfile

@@ -1,7 +1,10 @@
 FROM library/alpine
 RUN apk add --no-cache openssh && \
-  sed -i /etc/ssh/sshd_config -e s/'#Port.*'/'Port 2222'/ -e s/'AllowTcpForwarding.*'/'AllowTcpForwarding yes'/ && \
-  ssh-keygen -A
+  sed -i /etc/ssh/sshd_config \
+  -e s/'#Port.*'/'Port 2222'/ \
+  -e s/'AllowTcpForwarding.*'/'AllowTcpForwarding yes'/ \
+  -e s/'GatewayPorts.*'/'GatewayPorts clientspecified'/ \
+  && ssh-keygen -A
 RUN adduser -D -s /bin/ash beagle
 ADD beagle.key /home/beagle/.ssh/authorized_keys
 RUN passwd -u beagle && \

jelly/ing.yaml

@@ -0,0 +1,25 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt
+    external-dns.alpha.kubernetes.io/target: drache.martyn.berlin
+    kubernetes.io/ingress.class: nginx
+  name: jellyfin-ingress
+  namespace: jellyfin
+spec:
+  rules:
+  - host: flix.martyn.berlin
+    http:
+      paths:
+      - backend:
+          service:
+            name: jellyfin
+            port:
+              number: 8096
+        path: /
+        pathType: Prefix
+  tls:
+  - hosts:
+    - flix.martyn.berlin
+    secretName: flix-tls

jelly/service.yaml

@@ -0,0 +1,7 @@
+kind: Service
+apiVersion: v1
+metadata:
+  name: jellyfin
+spec:
+  type: ExternalName
+  externalName: remote-jelly.cluster-ingress.svc.cluster.local