apiVersion: v1
kind: Service
metadata:
  name: gitea-ssh-nodeport
  namespace: default
  labels:
    app.kubernetes.io/name: gitea
    app.kubernetes.io/instance: gitea
    app.kubernetes.io/managed-by: manual
  annotations:
    note: "Exposes Gitea SSH for on-node git automation. Not managed by Helm chart. See RAIL-HO-WP-0004-T07."
spec:
  type: NodePort
  selector:
    app.kubernetes.io/instance: gitea
    app.kubernetes.io/name: gitea
  ports:
    - name: ssh
      port: 22
      targetPort: 2222
      nodePort: 30022
      protocol: TCP