fix(nixos): retain Gitea LXC routes

configs/nixos/README.md

@@ -102,7 +102,7 @@ Confirm you have connectivity (`ping -c1 github.com`) before continuing.
 Clone the monorepo onto the live ISO and work from that local checkout:
 
 ```console
-$ git clone ssh://gitea@git.alexion.dev/alexion/dev.git
+$ git clone ssh://gitea@git.alexion.dev:2022/alexion/dev.git
 $ cd dev
 ```
 

configs/nixos/guests/reverse-proxy.nix

@@ -1,11 +1,10 @@
 {
   config,
   lib,
-  registry,
   ...
 }:
 let
-  giteaAddress = registry.address.${config.networking.hostName}.gitea;
+  giteaSshBackend = "10.23.20.45:2022";
 in
 {
   config = lib.mkIf config.guests.reverse-proxy.enable {
@@ -17,7 +16,7 @@ in
           "git.alexion.dev" = {
             forceSSL = true;
             enableACME = true;
-            locations."/".proxyPass = "http://${giteaAddress}:3000";
+            locations."/".proxyPass = "http://10.23.20.32";
           };
           "photos.alexion.dev" = {
             forceSSL = true;
@@ -46,12 +45,12 @@ in
           };
         };
 
-        networking.firewall.allowedTCPPorts = [ 22 ];
+        networking.firewall.allowedTCPPorts = [ 2022 ];
 
         services.nginx.streamConfig = ''
           server {
-            listen 22;
-            proxy_pass ${giteaAddress}:2222;
+            listen 2022;
+            proxy_pass ${giteaSshBackend};
           }
         '';
       };

configs/nixos/modules/network/ssh.nix

@@ -33,9 +33,10 @@ let
   });
 
   extraTargets = {
-    # TODO: Pin Gitea's host key after deploying its Pikachu guest.
+    # TODO: Pin Gitea's host key after migrating it from Proxmox.
     gitea = {
       hostName = "git.alexion.dev";
+      port = 2022;
       user = "gitea";
       aliases = [
         "gitea"