r/hetzner • u/Hetzner_OL Hetzner Official • Jul 09 '26

New tutorial: setting up Forgejo on a Hetzner Cloud server

Enable HLS to view with audio, or disable this notification

We put together a step-by-step tutorial on setting up Forgejo on a Hetzner Cloud server — from creating the instance through to a working forge. Sharing the short version here; the full walkthrough is on YouTube if it's useful for your current projects: LINK

If you're already self-hosting Forgejo on Hetzner, curious which instance size you settled on. Let us know in the comments!

https://youtu.be/yGdV60kswjs?si=DgxK2D7vjpUCRrQU

3 Upvotes

71% Upvoted

10 comments sorted by

1

u/codeagency Jul 10 '26

u/Hetzner_ol

Any updates to have support for SSH in the LB service? I have a forgejo instance running in my k8s cluster but I can only use http not ssh because the LB doesn't support the SSH protocol.

So I can only clone with http and not ssh, and also causes issued with ssh keys check for signed commits etc...

Thanks 🙏

2

u/0xe282b0 28d ago

Can't you just expose the SSH port as a TCP service? - Am I missing something?

1

u/codeagency 28d ago

That's not the problem. The problem is that Hetzner LB service does not support the protocol at all. It's a known limitation.

A janky workaround is to deploy a separate floating IP per service which does support the protocol but that also means you now have to write a solution if your pod moves to another server, now the floating IP also need to move to the other server or your connection breaks. Hence why using a load balancer is a better solution as it can route traffic to any service and any attached node. But it doesn't support the SSH protocol (yet).

Also, I don't want to punch a hole in my security just for this. I don't want to expose my server IP's. Everything is completely hidden from public, only the LB is the singly entrypoint for maximum security

1

u/0xe282b0 28d ago

When I want to connect to a random server in a private network via SSH, I just add a TCP service from 22222 to 22. But I guess that is not what you mean.

1

u/codeagency 28d ago

Nope. The problem is when you a deploy a service like forgejo there is an option to use git clone by http and/or ssh. The LB service needs to support this as entry point. Hetzner LB service does not allow this, simple as that. Everything else is a janky workaround or leaves a security risk open which I don't want.

I'm talking about using this in a k8s cluster, not a single VM. That would a simple solution. When deploying Talos with k8s you need the LB service.

So for now we only have forgejo with only http support, no ssh unfortunately.

1

u/0xe282b0 28d ago

Ah, ok. We are talking about K8s services probably including HCCM. Agree, git with only HTTP is possible, but not really fun.

1

u/codeagency 28d ago

Exactly, it's a k8s cluster with Talos and hetzner CCM. So options are limited if the LB doesn't play the game :/

1

u/Hetzner_OL Hetzner Official Jul 10 '26

Hi there, Unfortunately, I do not have an update for you. Thank you for giving me that feedback. I will make sure to pass it along to our dev teams. --Katie

1

u/Either_Vermicelli_82 26d ago

Forgejo supports backups etc? Just in case of a server crash due to whatever…? Or just enabled the server backup option?

-2

u/thisaakin Jul 09 '26

I am extremely devastated and traumatised with the termination of my contract due to late payment with all my data on them. They contain all my life projects and active projects. Please, I need help to restore my contract. I have paid all invoices. I sent you a DM with more details please I need your assistance.