diff --git a/gitea/values.yaml b/gitea/values.yaml
index 5423fa8..7f628be 100644
--- a/gitea/values.yaml
+++ b/gitea/values.yaml
@@ -48,6 +48,12 @@ ingress:
   annotations:
     "traefik.ingress.kubernetes.io/router.tls.certresolver": "letsencrypt"
 
+service:
+  ssh:
+    type: ClusterIP
+    port: 22
+    clusterIP:
+      
   
 redis:
   enabled: true
@@ -57,3 +63,22 @@ postgresql:
   enabled: false
 postgresql-ha:
   enabled: false
+
+
+extraDeploy:
+- apiVersion: traefik.io/v1alpha1
+  kind: IngressRouteTCP
+  metadata:
+    name: gitea-ssh
+    namespace: gitea
+    labels:
+      app: gitea
+  spec:
+    entryPoints:
+      - ssh
+    routes:
+      - match: HostSNI(`*`)
+        services:
+          - name: gitea-ssh
+            port: 22
+      
diff --git a/traefik/values.yaml b/traefik/values.yaml
index e634f05..035fe79 100644
--- a/traefik/values.yaml
+++ b/traefik/values.yaml
@@ -48,6 +48,14 @@ ports:
     middlewares:
       - traefik-rate-limit@kubernetescrd
 
+  ssh:
+    port: 2222
+    expose:
+      default: true
+    exposedPort: 2222
+    protocol: TCP
+    
+    
 extraObjects:
   - apiVersion: v1
     kind: Secret