I have not time and hurry, and have made a decision to get the simplest possible way - run SSH alongside with Gitea container. Generally, it’s wrong - SSH must be separated container. But it’s not so bad as to forward host SSH - we need some virtualization due to security and reliability concerns.
I was able to do the same thing simply doing a port mapping in captain rover from 22 to 22, which allowed me to setup remote deploys, but I wouldn’t have thought of that without this post.