I'm running GitLab and serving git repositories over SSH from GitLab's internal SSH-server. It works just like Github: users adds their public key in a web page and are able to use SSH after that.
I want to restrict access to this server from the Internet while having it completely open on our local network. Is there any way I can set up a SSH-server in front of GitLab that
- Authorize users against a whitelist (e.g.
- Forwards authorized traffic to my GitLab server
This is quite easy to do with HTTPS-traffic and client certificates using HAProxy, but I can't find any way to achieve the same with SSH and public keys.