feat(traefik): add TCP SSH entrypoints for Gitea (2221) and JARVIS (10171)

- New entrypoints: gitea-ssh/:2221, jarvis-ssh/:10171
- Expose both ports from the Traefik container
- gitea.yml: TCP passthrough router -> 10.1.71.129:2221
- jarvis.yml: TCP passthrough router -> 10.1.71.131:22
- Both use HostSNI(*) — dedicated entrypoints, no TLS wrapping needed
- UniFi to forward both ports to lightning-lane

boilerplates/traefik/dynamic/gitea.yml

@@ -15,3 +15,17 @@ http:
       loadBalancer:
         servers:
           - url: "http://10.1.71.129:3000"
+
+tcp:
+  routers:
+    gitea-ssh:
+      rule: "HostSNI(`*`)"
+      entryPoints:
+        - gitea-ssh
+      service: gitea-ssh
+
+  services:
+    gitea-ssh:
+      loadBalancer:
+        servers:
+          - address: "10.1.71.129:2221"