SSH Access to Gitlab instance not working

[kaxline]

@brutalbirdie Sorry, still messing up communication despite my best efforts.

In my previous post, I only cited this command as an example:

git clone ssh://git@git.cloudron.io:6000/cloudron/gitlab-app.git

Since I didn't want to post my actual connection string, which is something like:

git clone ssh://git@gitlab.mydomain.com:XXXXX/cloudron/my-repo.git

And that's the one that is not working and has Operation timed out as the error. Again, this is not an issue with reaching git.cloudron.io. It's an issue with reaching gitlab.mydomain.com.

I'm just trying to use the ssh links for my repos hosted on my Cloudron instance of Gitlab. Nothing fancy. I just can't connect to them from my machine, even though I can ssh into the server that is running Cloudron.

Does that make sense?

[kaxline]

@scooke No, it was never working. I've always had to use the HTTPS links for repos.

Thanks for those links! I'll check them out and post back here if they work.

[girish]

@kaxline Does telnet gitlab.mydomain.com port connect? (replace port with your gitlab ssh port). I think if it doesn't connect, it's some firewall/networking issue and we should start from there.

[kaxline]

@girish Thanks for chiming in here. Indeed telnet gitlab.mydomain.com port hangs for me as well.

I white listed the port and restarted the cloudron-firewall service, but still no love.

Any other ideas of what to test/debug?

[mehdi]

@kaxline Which VPS provider are you using? Are there any other apps that you use which use external ports?

[girish]

@kaxline there's no need to white list the ports in cloudron-firewall, it's all automatic for the apps. As @mehdi asked, which VPS provider are you using? Some providers like azure/aws ec2/gce block all ports by default. So you have to add the port manually to the security group or equivalent. Other providerse like DO, linode, vultr, usually have everything open by default. But I think these days DO has added some tagging/labeling feature that can be mixed with their firewall to block ports by default for new VPS (not 100% sure about this).

[kaxline]

@girish @mehdi I'm using Netcup, so I guess I'll look into what their policy is unless you know off the top of your head. Actually started using them because people were recommending them after the last online Cloudron meetup I went to.

[girish]

@kaxline netcup should have the SSH port open. If you can write to us at support@cloudron.io, we can take a look as to why/where the SSH is getting blocked.

[girish]

Followed this up on support@, the issue was that the gitlab instance was behind Cloudflare. Cloudflare, of course, cannot proxy non-http ports. This is why the ssh+clone wasn't working. I will look into adding a warning about this when trying to install apps which require a port and a Cloudflare domain is used.

[girish]

Created https://git.cloudron.io/cloudron/box/-/issues/802