Setting Up Gitea on Proxmox with Cloudflare Zero Trust Tunnels
-
Hey everyone,
I recently went through the process of setting up a self-hosted Gitea server on a Proxmox LXC and wanted to share the steps I took. A big part of this was securing external access using Cloudflare Zero Trust tunnels for both the web UI (HTTP) and Git operations (SSH).
I know much of the information on Gitea, Proxmox, and Cloudflare tunnels exists separately, but I wanted to try and bring it all together in one place based on my experience. It's also part of my effort to document my own self-hosting journey.
️The guide covers things like:
- Installing Gitea on Proxmox (using helper scripts).
- Basic Gitea configuration (web UI, users, keys).
- Setting up Cloudflare tunnels for secure HTTP and SSH access.
- Configuring the local SSH client and Gitea for tunnelled SSH connections.
It's basically a walkthrough of how I got my personal Git server running and accessible securely from outside my network. Maybe not brand new information for everyone here, but hopefully, it's a useful aggregation for someone looking to do something similar.
You can read the full post here: https://cachaza.cc/blog/03-self-hosted-gitea/
Happy to hear any thoughts or feedback! Cheers.
-
System shared this topic on
-
Hey everyone,
I recently went through the process of setting up a self-hosted Gitea server on a Proxmox LXC and wanted to share the steps I took. A big part of this was securing external access using Cloudflare Zero Trust tunnels for both the web UI (HTTP) and Git operations (SSH).
I know much of the information on Gitea, Proxmox, and Cloudflare tunnels exists separately, but I wanted to try and bring it all together in one place based on my experience. It's also part of my effort to document my own self-hosting journey.
️The guide covers things like:
- Installing Gitea on Proxmox (using helper scripts).
- Basic Gitea configuration (web UI, users, keys).
- Setting up Cloudflare tunnels for secure HTTP and SSH access.
- Configuring the local SSH client and Gitea for tunnelled SSH connections.
It's basically a walkthrough of how I got my personal Git server running and accessible securely from outside my network. Maybe not brand new information for everyone here, but hopefully, it's a useful aggregation for someone looking to do something similar.
You can read the full post here: https://cachaza.cc/blog/03-self-hosted-gitea/
Happy to hear any thoughts or feedback! Cheers.
There is any particular reason to deploy a new gitea instance instead of forgejo in 2025?
-
There is any particular reason to deploy a new gitea instance instead of forgejo in 2025?
This
I would go Forgejo all day every day
-
Hey everyone,
I recently went through the process of setting up a self-hosted Gitea server on a Proxmox LXC and wanted to share the steps I took. A big part of this was securing external access using Cloudflare Zero Trust tunnels for both the web UI (HTTP) and Git operations (SSH).
I know much of the information on Gitea, Proxmox, and Cloudflare tunnels exists separately, but I wanted to try and bring it all together in one place based on my experience. It's also part of my effort to document my own self-hosting journey.
️The guide covers things like:
- Installing Gitea on Proxmox (using helper scripts).
- Basic Gitea configuration (web UI, users, keys).
- Setting up Cloudflare tunnels for secure HTTP and SSH access.
- Configuring the local SSH client and Gitea for tunnelled SSH connections.
It's basically a walkthrough of how I got my personal Git server running and accessible securely from outside my network. Maybe not brand new information for everyone here, but hopefully, it's a useful aggregation for someone looking to do something similar.
You can read the full post here: https://cachaza.cc/blog/03-self-hosted-gitea/
Happy to hear any thoughts or feedback! Cheers.
-
I played with Forgejo recently, but couldn't for the life of me figure out how to get the SSH connections passed to the Forgejo LXC from my Nginx Proxy Manager. No matter what I did, the connection went to the NPM box, not the Forgejo box.
You need to forward traffic
SSH is just plain TCP. You probably were trying to use http.
-
There is any particular reason to deploy a new gitea instance instead of forgejo in 2025?
To be honest, when I set this up and wrote the guide, I wasn't really aware of Forgejo as a distinct option, or at least hadn't looked into it deeply. Gitea came up frequently in my research for lightweight self-hosted Git servers
Having had a quick look now that you mention it, while Forgejo definitely looks like a solid project, I'm not immediately seeing any specific features it offers that are essential for my personal use case that Gitea doesn't already cover. Gitea's is meeting my needs perfectly so far.
But it's good to know about it, thanks for bringing it up! -
To be honest, when I set this up and wrote the guide, I wasn't really aware of Forgejo as a distinct option, or at least hadn't looked into it deeply. Gitea came up frequently in my research for lightweight self-hosted Git servers
Having had a quick look now that you mention it, while Forgejo definitely looks like a solid project, I'm not immediately seeing any specific features it offers that are essential for my personal use case that Gitea doesn't already cover. Gitea's is meeting my needs perfectly so far.
But it's good to know about it, thanks for bringing it up!I have been running a selfhosted gitea instance for many years. However since Gitea Limited as a per profit organization have different objectives than Forgejo and Gitea Source Contributors I will rather not recommend it for selfhosting. Gitea Limited still great for businesses that need access to official support.
-
System shared this topic on
