enable `ecdsa` and /or `ed25519` for buildin ssh server (rootless instances) #11

New issue

Open

opened 2025-12-08 12:51:27 +00:00 by Ghostinvisible-forgejo-org · 1 comment

Ghostinvisible-forgejo-org commented

2025-12-08 12:51:27 +00:00

Currently rootless instances only have rsa enabled, we should generate ecdsa and /or ed25519 keys.

Steps:

generate keys on k8s host

ssh-keygen -t ed25519 -f /precious/k8s/<pvc>/ssh/ed25519
ssh-keygen -t ecdsa -f /precious/k8s/<pvc>/ssh/ecdsa

update values config

gitea:
  config:
    server:
      SSH_SERVER_HOST_KEYS: ssh/gitea.rsa,ssh/ecdsa,ssh/ed25519

Currently rootless instances only have rsa enabled, we should generate `ecdsa` and /or `ed25519` keys. ## Steps: - generate keys on k8s host ```sh ssh-keygen -t ed25519 -f /precious/k8s/<pvc>/ssh/ed25519 ssh-keygen -t ecdsa -f /precious/k8s/<pvc>/ssh/ecdsa ``` - update `values` config ```yaml gitea: config: server: SSH_SERVER_HOST_KEYS: ssh/gitea.rsa,ssh/ecdsa,ssh/ed25519 ```

👍 1

Ghostinvisible-forgejo-org commented

2025-12-08 12:51:27 +00:00

Author

Sounds like a good idea.