hello wondering if anyone has done this combo, i have pfsense with haproxy and gitlab on a vm working on the web front end on 443 with certs ssl but cannot get the ssh side working as it needs to come from the same domain and either route to 22 or 80 has anyone done a config like this successfully
thanks for any insite
SSH is already encrypted traffic so you can just expose SSH on a different port with ssh keys for security with a NAT rule. I’m not sure why you would have that traffic going through the proxy.
was just trying to run everything through the proxy to minimize security risk but i did end up getting it working creating a ssh frontend exposing 22 with a backend of the gitlab server but im sure this would be no different then just using nat. Only problem im running into now is im trying to setup google login oauthen and its creating a 500 error on the login page which i think may also be releated to haproxy and the ssl offloading possibly if you have any advice for this as well would be greatly appriciated
Try enabling x-forward-for on the front end.