diff --git a/onedev/ingress-route-tcp.yaml b/onedev/ingress-route-tcp.yaml
new file mode 100644
index 0000000..b04f03a
--- /dev/null
+++ b/onedev/ingress-route-tcp.yaml
@@ -0,0 +1,13 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRouteTCP
+metadata:
+  name: onedev-ssh
+  namespace: onedev
+spec:
+  entryPoints:
+    - onedev-ssh
+  routes:
+  - match: HostSNI(`*`)
+    services:
+    - name: onedev
+      port: 22
diff --git a/traefik/helmrelease-traefik.yaml b/traefik/helmrelease-traefik.yaml
index 67ba5bc..dde360a 100644
--- a/traefik/helmrelease-traefik.yaml
+++ b/traefik/helmrelease-traefik.yaml
@@ -31,6 +31,10 @@ spec:
         port: 55522
         expose:
           default: true
+      onedev-ssh:
+        port: 2222
+        expose:
+          default: true
       wireguard-udp:
         port: 51822
         protocol: UDP