Bug: Traefik does not load balance UDP and TCP for services

[Zer0PointModule]

While almost no services need this, a service like forgejo that exposes port 2222 does, well at least if you want to use it over pangolin-newt which seems fair.

You can help yourself and configure something like this in your stacks.nix:

        staticConfig.entrypoints.sshgit.address = ":2222";
        dynamicConfig.tcp = {
          routers.forgejo-ssh = {
            entryPoints = ["sshgit"];
            rule = "HostSNI(`*`)";
            service = "forgejo-ssh";
          };
          services.forgejo-ssh.loadbalancer.servers = [
            { address = "forgejo:22"; }
          ];
        };
        containers.traefik.ports = lib.mkAfter [ "2222:2222" ];

You could make the case you don't want everything proxied by Traefik and that you choose that you should just connect over lan exclusively. For me however, this feels like a shortcoming that this isn't covered by default in this project.

[Tarow]

You're right, i can add an option to the affected stacks to make Traefik handle ports for Forgejo, Adguard, Wireguard etc.

I don't use newt myself, so out of interested: Since newt and forgejo are on the same network, couldn't you just connect via forgejo:2222 ?

[Zer0PointModule]

Well it depends on how you use Pangolin, if you use their proxy and make public resources your suggestion is sufficient if you however make private resources that require the VPN client, all you can specify is an ip or hostname to make available under a certain alias (optionally), if you want https to work you can't just use the ip or docker hostname so you set up the private resource with your actual FQDN.

[Tarow]

I see, i will add some option to optionally let Traefik handle non-http traffic too when im back from vacation.