ssh туннель

docker/ssh-tunnel/Dockerfile

@@ -0,0 +1,10 @@
+FROM debian:bookworm-slim
+
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends openssh-client ca-certificates netcat-openbsd \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY docker/ssh-tunnel/start.sh /usr/local/bin/moonwell-core-tunnel
+RUN chmod 0755 /usr/local/bin/moonwell-core-tunnel
+
+ENTRYPOINT ["/usr/local/bin/moonwell-core-tunnel"]

docker/ssh-tunnel/start.sh

@@ -0,0 +1,20 @@
+#!/bin/sh
+set -eu
+
+: "${CORE_SSH_HOST:?Set CORE_SSH_HOST}"
+: "${CORE_SSH_USER:?Set CORE_SSH_USER}"
+
+exec ssh -NT \
+    -p "${CORE_SSH_PORT:-22}" \
+    -i /run/ssh/id_ed25519 \
+    -o BatchMode=yes \
+    -o IdentitiesOnly=yes \
+    -o StrictHostKeyChecking=yes \
+    -o UserKnownHostsFile=/run/ssh/known_hosts \
+    -o GlobalKnownHostsFile=/dev/null \
+    -o ExitOnForwardFailure=yes \
+    -o ServerAliveInterval=30 \
+    -o ServerAliveCountMax=3 \
+    -o ConnectTimeout=10 \
+    -L "0.0.0.0:3306:${CORE_DB_HOST:-127.0.0.1}:${CORE_DB_PORT:-13306}" \
+    "${CORE_SSH_USER}@${CORE_SSH_HOST}"