|
|
|
@ -166,7 +166,7 @@ external_url '__GENERATED_EXTERNAL_URL__'
|
|
|
|
# gitlab_rails['gitlab_default_projects_features_container_registry'] = true
|
|
|
|
# gitlab_rails['gitlab_default_projects_features_container_registry'] = true
|
|
|
|
|
|
|
|
|
|
|
|
### Automatic issue closing
|
|
|
|
### Automatic issue closing
|
|
|
|
###! See https://docs.gitlab.com/ee/customization/issue_closing.html for more
|
|
|
|
###! See https://docs.gitlab.com/ee/administration/issue_closing_pattern.html for more
|
|
|
|
###! information about this pattern.
|
|
|
|
###! information about this pattern.
|
|
|
|
# gitlab_rails['gitlab_issue_closing_pattern'] = "\b((?:[Cc]los(?:e[sd]?|ing)|\b[Ff]ix(?:e[sd]|ing)?|\b[Rr]esolv(?:e[sd]?|ing)|\b[Ii]mplement(?:s|ed|ing)?)(:?) +(?:(?:issues? +)?%{issue_ref}(?:(?:, *| +and +)?)|([A-Z][A-Z0-9_]+-\d+))+)"
|
|
|
|
# gitlab_rails['gitlab_issue_closing_pattern'] = "\b((?:[Cc]los(?:e[sd]?|ing)|\b[Ff]ix(?:e[sd]|ing)?|\b[Rr]esolv(?:e[sd]?|ing)|\b[Ii]mplement(?:s|ed|ing)?)(:?) +(?:(?:issues? +)?%{issue_ref}(?:(?:, *| +and +)?)|([A-Z][A-Z0-9_]+-\d+))+)"
|
|
|
|
|
|
|
|
|
|
|
|
@ -704,7 +704,7 @@ EOS
|
|
|
|
# gitlab_rails['backup_storage_class'] = 'STANDARD'
|
|
|
|
# gitlab_rails['backup_storage_class'] = 'STANDARD'
|
|
|
|
|
|
|
|
|
|
|
|
###! Skip parts of the backup. Comma separated.
|
|
|
|
###! Skip parts of the backup. Comma separated.
|
|
|
|
###! Docs: https://docs.gitlab.com/ee/administration/backup_restore/backup_gitlab.html#excluding-specific-directories-from-the-backup
|
|
|
|
###! Docs: https://docs.gitlab.com/ee/administration/backup_restore/backup_gitlab.html#excluding-specific-data-from-the-backup
|
|
|
|
#gitlab_rails['env'] = {
|
|
|
|
#gitlab_rails['env'] = {
|
|
|
|
# "SKIP" => "db,uploads,repositories,builds,artifacts,lfs,registry,pages"
|
|
|
|
# "SKIP" => "db,uploads,repositories,builds,artifacts,lfs,registry,pages"
|
|
|
|
#}
|
|
|
|
#}
|
|
|
|
@ -731,7 +731,7 @@ EOS
|
|
|
|
# gitlab_rails['encrypted_settings_path'] = '/var/opt/gitlab/gitlab-rails/shared/encrypted_settings'
|
|
|
|
# gitlab_rails['encrypted_settings_path'] = '/var/opt/gitlab/gitlab-rails/shared/encrypted_settings'
|
|
|
|
|
|
|
|
|
|
|
|
### Wait for file system to be mounted
|
|
|
|
### Wait for file system to be mounted
|
|
|
|
###! Docs: https://docs.gitlab.com/omnibus/settings/configuration.html#only-start-omnibus-gitlab-services-after-a-given-file-system-is-mounted
|
|
|
|
###! Docs: https://docs.gitlab.com/omnibus/settings/configuration.html#start-linux-package-installation-services-only-after-a-given-file-system-is-mounted
|
|
|
|
# high_availability['mountpoint'] = ["/var/opt/gitlab/git-data", "/var/opt/gitlab/gitlab-rails/shared"]
|
|
|
|
# high_availability['mountpoint'] = ["/var/opt/gitlab/git-data", "/var/opt/gitlab/gitlab-rails/shared"]
|
|
|
|
|
|
|
|
|
|
|
|
### GitLab Shell settings for GitLab
|
|
|
|
### GitLab Shell settings for GitLab
|
|
|
|
@ -1060,7 +1060,7 @@ gitlab_rails['gitlab_shell_ssh_port'] = __SSH_PORT__
|
|
|
|
# }
|
|
|
|
# }
|
|
|
|
|
|
|
|
|
|
|
|
### Registry database
|
|
|
|
### Registry database
|
|
|
|
###! Docs: https://docs.gitlab.com/ee/administration/packages/container_registry.html?tab=Linux+package+%28Omnibus%29#configure-a-metadata-database-for-the-container-registry
|
|
|
|
###! Docs: https://docs.gitlab.com/ee/administration/packages/container_registry_metadata_database.html#new-installations
|
|
|
|
# registry['database'] = {
|
|
|
|
# registry['database'] = {
|
|
|
|
# 'enabled' => true,
|
|
|
|
# 'enabled' => true,
|
|
|
|
# 'host' => 'localhost',
|
|
|
|
# 'host' => 'localhost',
|
|
|
|
@ -1335,7 +1335,7 @@ puma['port'] = __PORT_PUMA__
|
|
|
|
##! GitLab allows one to start multiple sidekiq processes. These
|
|
|
|
##! GitLab allows one to start multiple sidekiq processes. These
|
|
|
|
##! processes can be used to consume a dedicated set of queues. This
|
|
|
|
##! processes can be used to consume a dedicated set of queues. This
|
|
|
|
##! can be used to ensure certain queues are able to handle additional workload.
|
|
|
|
##! can be used to ensure certain queues are able to handle additional workload.
|
|
|
|
##! https://docs.gitlab.com/ee/administration/operations/extra_sidekiq_processes.html
|
|
|
|
##! https://docs.gitlab.com/ee/administration/sidekiq/extra_sidekiq_processes.html
|
|
|
|
|
|
|
|
|
|
|
|
# sidekiq['enable'] = true
|
|
|
|
# sidekiq['enable'] = true
|
|
|
|
# sidekiq['log_directory'] = "/var/log/gitlab/sidekiq"
|
|
|
|
# sidekiq['log_directory'] = "/var/log/gitlab/sidekiq"
|
|
|
|
@ -1394,7 +1394,7 @@ sidekiq['listen_port'] = __PORT_SIDEKIQ__
|
|
|
|
|
|
|
|
|
|
|
|
### Git trace log file.
|
|
|
|
### Git trace log file.
|
|
|
|
###! If set, git commands receive GIT_TRACE* environment variables
|
|
|
|
###! If set, git commands receive GIT_TRACE* environment variables
|
|
|
|
###! Docs: https://git-scm.com/book/es/v2/Git-Internals-Environment-Variables#Debugging
|
|
|
|
###! Docs: https://git-scm.com/book/en/v2/Git-Internals-Environment-Variables#_debugging
|
|
|
|
###! An absolute path starting with / - the trace output will be appended to
|
|
|
|
###! An absolute path starting with / - the trace output will be appended to
|
|
|
|
###! that file. It needs to exist so we can check permissions and avoid
|
|
|
|
###! that file. It needs to exist so we can check permissions and avoid
|
|
|
|
###! throwing warnings to the users.
|
|
|
|
###! throwing warnings to the users.
|
|
|
|
@ -1456,6 +1456,8 @@ sidekiq['listen_port'] = __PORT_SIDEKIQ__
|
|
|
|
# postgresql['connect_port'] = 5432
|
|
|
|
# postgresql['connect_port'] = 5432
|
|
|
|
|
|
|
|
|
|
|
|
##! **recommend value is 1/4 of total RAM, up to 14GB.**
|
|
|
|
##! **recommend value is 1/4 of total RAM, up to 14GB.**
|
|
|
|
|
|
|
|
# For Docker containers, the default of 256 MB is set in docker/assets/gitlab.rb.
|
|
|
|
|
|
|
|
# Otherwise, 1/4 of the total RAM is used in files/gitlab-cookbooks/postgresql/attributes/default.rb.
|
|
|
|
# postgresql['shared_buffers'] = "256MB"
|
|
|
|
# postgresql['shared_buffers'] = "256MB"
|
|
|
|
|
|
|
|
|
|
|
|
### Advanced settings
|
|
|
|
### Advanced settings
|
|
|
|
@ -1659,7 +1661,7 @@ sidekiq['listen_port'] = __PORT_SIDEKIQ__
|
|
|
|
###! **To enable only Redis service in this machine, uncomment
|
|
|
|
###! **To enable only Redis service in this machine, uncomment
|
|
|
|
###! one of the lines below (choose master or replica instance types).**
|
|
|
|
###! one of the lines below (choose master or replica instance types).**
|
|
|
|
###! Docs: https://docs.gitlab.com/omnibus/settings/redis.html
|
|
|
|
###! Docs: https://docs.gitlab.com/omnibus/settings/redis.html
|
|
|
|
###! https://docs.gitlab.com/ee/administration/high_availability/redis.html
|
|
|
|
###! https://docs.gitlab.com/ee/administration/redis/replication_and_failover.html
|
|
|
|
# redis_master_role['enable'] = true
|
|
|
|
# redis_master_role['enable'] = true
|
|
|
|
# redis_replica_role['enable'] = true
|
|
|
|
# redis_replica_role['enable'] = true
|
|
|
|
|
|
|
|
|
|
|
|
@ -1672,7 +1674,7 @@ sidekiq['listen_port'] = __PORT_SIDEKIQ__
|
|
|
|
###! **You need a master replica Redis replication to be able to do failover**
|
|
|
|
###! **You need a master replica Redis replication to be able to do failover**
|
|
|
|
###! **Please read the documentation before enabling it to understand the
|
|
|
|
###! **Please read the documentation before enabling it to understand the
|
|
|
|
###! caveats:**
|
|
|
|
###! caveats:**
|
|
|
|
###! Docs: https://docs.gitlab.com/ee/administration/high_availability/redis.html
|
|
|
|
###! Docs: https://docs.gitlab.com/ee/administration/redis/replication_and_failover.html
|
|
|
|
|
|
|
|
|
|
|
|
### Replication support
|
|
|
|
### Replication support
|
|
|
|
#### Replica Redis instance
|
|
|
|
#### Replica Redis instance
|
|
|
|
@ -1758,7 +1760,6 @@ nginx['client_max_body_size'] = '__CLIENT_MAX_BODY_SIZE__'
|
|
|
|
# nginx['ssl_prefer_server_ciphers'] = "off"
|
|
|
|
# nginx['ssl_prefer_server_ciphers'] = "off"
|
|
|
|
|
|
|
|
|
|
|
|
##! **Recommended by: https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html
|
|
|
|
##! **Recommended by: https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html
|
|
|
|
##! https://cipherli.st/**
|
|
|
|
|
|
|
|
# nginx['ssl_protocols'] = "TLSv1.2 TLSv1.3"
|
|
|
|
# nginx['ssl_protocols'] = "TLSv1.2 TLSv1.3"
|
|
|
|
|
|
|
|
|
|
|
|
##! **Recommended in: https://nginx.org/en/docs/http/ngx_http_ssl_module.html**
|
|
|
|
##! **Recommended in: https://nginx.org/en/docs/http/ngx_http_ssl_module.html**
|
|
|
|
@ -1775,7 +1776,7 @@ nginx['client_max_body_size'] = '__CLIENT_MAX_BODY_SIZE__'
|
|
|
|
# nginx['listen_addresses'] = ['*', '[::]']
|
|
|
|
# nginx['listen_addresses'] = ['*', '[::]']
|
|
|
|
|
|
|
|
|
|
|
|
##! **Defaults to forcing web browsers to always communicate using only HTTPS**
|
|
|
|
##! **Defaults to forcing web browsers to always communicate using only HTTPS**
|
|
|
|
##! Docs: https://docs.gitlab.com/omnibus/settings/nginx.html#setting-http-strict-transport-security
|
|
|
|
##! Docs: https://docs.gitlab.com/omnibus/settings/ssl/#configure-the-http-strict-transport-security-hsts
|
|
|
|
# nginx['hsts_max_age'] = 63072000
|
|
|
|
# nginx['hsts_max_age'] = 63072000
|
|
|
|
# nginx['hsts_include_subdomains'] = false
|
|
|
|
# nginx['hsts_include_subdomains'] = false
|
|
|
|
|
|
|
|
|
|
|
|
@ -1790,11 +1791,11 @@ nginx['client_max_body_size'] = '__CLIENT_MAX_BODY_SIZE__'
|
|
|
|
nginx['listen_port'] = __PORT__
|
|
|
|
nginx['listen_port'] = __PORT__
|
|
|
|
|
|
|
|
|
|
|
|
##! **Override only if your reverse proxy internally communicates over HTTP**
|
|
|
|
##! **Override only if your reverse proxy internally communicates over HTTP**
|
|
|
|
##! Docs: https://docs.gitlab.com/omnibus/settings/nginx.html#supporting-proxied-ssl
|
|
|
|
##! Docs: https://docs.gitlab.com/omnibus/settings/ssl/#configure-a-reverse-proxy-or-load-balancer-ssl-termination
|
|
|
|
nginx['listen_https'] = false
|
|
|
|
nginx['listen_https'] = false
|
|
|
|
|
|
|
|
|
|
|
|
##! **Override only if you use a reverse proxy with proxy protocol enabled**
|
|
|
|
##! **Override only if you use a reverse proxy with proxy protocol enabled**
|
|
|
|
##! Docs: https://docs.gitlab.com/omnibus/settings/nginx.html#configuring-proxy-protocol
|
|
|
|
##! Docs: https://docs.gitlab.com/omnibus/settings/nginx.html#configuring-the-proxy-protocol
|
|
|
|
# nginx['proxy_protocol'] = false
|
|
|
|
# nginx['proxy_protocol'] = false
|
|
|
|
|
|
|
|
|
|
|
|
# nginx['custom_gitlab_server_config'] = "location ^~ /foo-namespace/bar-project/raw/ {\n deny all;\n}\n"
|
|
|
|
# nginx['custom_gitlab_server_config'] = "location ^~ /foo-namespace/bar-project/raw/ {\n deny all;\n}\n"
|
|
|
|
@ -1933,7 +1934,7 @@ nginx['listen_https'] = false
|
|
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
################################################################################
|
|
|
|
## Runtime directory
|
|
|
|
## Runtime directory
|
|
|
|
##! Docs: https://docs.gitlab.com//omnibus/settings/configuration.html#configuring-runtime-directory
|
|
|
|
##! Docs: https://docs.gitlab.com//omnibus/settings/configuration.html#configure-the-runtime-directory
|
|
|
|
################################################################################
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
|
|
# runtime_dir '/run'
|
|
|
|
# runtime_dir '/run'
|
|
|
|
@ -2280,7 +2281,7 @@ nginx['listen_https'] = false
|
|
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
################################################################################
|
|
|
|
## GitLab Mattermost
|
|
|
|
## GitLab Mattermost
|
|
|
|
##! Docs: https://docs.gitlab.com/omnibus/gitlab-mattermost
|
|
|
|
##! Docs: https://docs.gitlab.com/ee/integration/mattermost/
|
|
|
|
################################################################################
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
|
|
# mattermost_external_url 'http://mattermost.example.com'
|
|
|
|
# mattermost_external_url 'http://mattermost.example.com'
|
|
|
|
@ -2373,7 +2374,6 @@ nginx['listen_https'] = false
|
|
|
|
|
|
|
|
|
|
|
|
###! **To enable only Monitoring service in this machine, uncomment
|
|
|
|
###! **To enable only Monitoring service in this machine, uncomment
|
|
|
|
###! the line below.**
|
|
|
|
###! the line below.**
|
|
|
|
###! Docs: https://docs.gitlab.com/ee/administration/high_availability
|
|
|
|
|
|
|
|
# monitoring_role['enable'] = true
|
|
|
|
# monitoring_role['enable'] = true
|
|
|
|
|
|
|
|
|
|
|
|
# prometheus['enable'] = true
|
|
|
|
# prometheus['enable'] = true
|
|
|
|
@ -2400,7 +2400,7 @@ nginx['listen_https'] = false
|
|
|
|
# Prometheus can scrape additional jobs via scrape_configs. The default automatically
|
|
|
|
# Prometheus can scrape additional jobs via scrape_configs. The default automatically
|
|
|
|
# includes all of the exporters supported by the omnibus config.
|
|
|
|
# includes all of the exporters supported by the omnibus config.
|
|
|
|
#
|
|
|
|
#
|
|
|
|
# See: https://prometheus.io/docs/operating/configuration/#<scrape_config>
|
|
|
|
# See: https://prometheus.io/docs/operating/configuration/#scrape_config
|
|
|
|
#
|
|
|
|
#
|
|
|
|
# Example:
|
|
|
|
# Example:
|
|
|
|
#
|
|
|
|
#
|
|
|
|
@ -2869,7 +2869,7 @@ nginx['listen_https'] = false
|
|
|
|
# letsencrypt['key_size'] = 2048
|
|
|
|
# letsencrypt['key_size'] = 2048
|
|
|
|
# letsencrypt['owner'] = 'root'
|
|
|
|
# letsencrypt['owner'] = 'root'
|
|
|
|
# letsencrypt['wwwroot'] = '/var/opt/gitlab/nginx/www'
|
|
|
|
# letsencrypt['wwwroot'] = '/var/opt/gitlab/nginx/www'
|
|
|
|
# See http://docs.gitlab.com/omnibus/settings/ssl.html#automatic-renewal for more on these sesttings
|
|
|
|
# See https://docs.gitlab.com/omnibus/settings/ssl/index.html#renew-the-certificates-automatically for more on these settings
|
|
|
|
# letsencrypt['auto_renew'] = true
|
|
|
|
# letsencrypt['auto_renew'] = true
|
|
|
|
# letsencrypt['auto_renew_hour'] = 0
|
|
|
|
# letsencrypt['auto_renew_hour'] = 0
|
|
|
|
# letsencrypt['auto_renew_minute'] = nil # Should be a number or cron expression, if specified.
|
|
|
|
# letsencrypt['auto_renew_minute'] = nil # Should be a number or cron expression, if specified.
|
|
|
|
@ -2991,7 +2991,7 @@ package['modify_kernel_parameters'] = __MODIFY_KERNEL_PARAMETERS__
|
|
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
################################################################################
|
|
|
|
## GitLab Sentinel (EE Only)
|
|
|
|
## GitLab Sentinel (EE Only)
|
|
|
|
##! Docs: http://docs.gitlab.com/ce/administration/high_availability/redis.html#high-availability-with-sentinel
|
|
|
|
##! Docs: https://docs.gitlab.com/ee/administration/redis/replication_and_failover.html
|
|
|
|
################################################################################
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
|
|
##! **Make sure you configured all redis['master_*'] keys above before
|
|
|
|
##! **Make sure you configured all redis['master_*'] keys above before
|
|
|
|
@ -2999,7 +2999,7 @@ package['modify_kernel_parameters'] = __MODIFY_KERNEL_PARAMETERS__
|
|
|
|
|
|
|
|
|
|
|
|
##! To enable Sentinel and disable all other services in this machine,
|
|
|
|
##! To enable Sentinel and disable all other services in this machine,
|
|
|
|
##! uncomment the line below (if you've enabled Redis role, it will keep it).
|
|
|
|
##! uncomment the line below (if you've enabled Redis role, it will keep it).
|
|
|
|
##! Docs: https://docs.gitlab.com/ee/administration/high_availability/redis.html
|
|
|
|
##! Docs: https://docs.gitlab.com/ee/administration/redis/replication_and_failover.html
|
|
|
|
# redis_sentinel_role['enable'] = true
|
|
|
|
# redis_sentinel_role['enable'] = true
|
|
|
|
|
|
|
|
|
|
|
|
# sentinel['enable'] = true
|
|
|
|
# sentinel['enable'] = true
|
|
|
|
@ -3093,16 +3093,16 @@ package['modify_kernel_parameters'] = __MODIFY_KERNEL_PARAMETERS__
|
|
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
################################################################################
|
|
|
|
## Additional Database Settings (EE only)
|
|
|
|
## Additional Database Settings (EE only)
|
|
|
|
##! Docs: https://docs.gitlab.com/ee/administration/database_load_balancing.html
|
|
|
|
##! Docs: https://docs.gitlab.com/ee/administration/postgresql/database_load_balancing.html
|
|
|
|
################################################################################
|
|
|
|
################################################################################
|
|
|
|
# gitlab_rails['db_load_balancing'] = { 'hosts' => ['secondary1.example.com'] }
|
|
|
|
# gitlab_rails['db_load_balancing'] = { 'hosts' => ['secondary1.example.com'] }
|
|
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
################################################################################
|
|
|
|
## GitLab Geo
|
|
|
|
## GitLab Geo
|
|
|
|
##! Docs: https://docs.gitlab.com/ee/gitlab-geo
|
|
|
|
##! Docs: https://docs.gitlab.com/ee/administration/geo/
|
|
|
|
################################################################################
|
|
|
|
################################################################################
|
|
|
|
##! Geo roles 'geo_primary_role' and 'geo_secondary_role' are set above with
|
|
|
|
##! Geo roles 'geo_primary_role' and 'geo_secondary_role' are set above with
|
|
|
|
##! other roles. For more information, see: https://docs.gitlab.com/omnibus/roles/index.html#roles.
|
|
|
|
##! other roles. For more information, see: https://docs.gitlab.com/omnibus/roles/index.html#roles .
|
|
|
|
|
|
|
|
|
|
|
|
# This is an optional identifier which Geo nodes can use to identify themselves.
|
|
|
|
# This is an optional identifier which Geo nodes can use to identify themselves.
|
|
|
|
# For example, if external_url is the same for two secondaries, you must specify
|
|
|
|
# For example, if external_url is the same for two secondaries, you must specify
|
|
|
|
@ -3172,8 +3172,8 @@ package['modify_kernel_parameters'] = __MODIFY_KERNEL_PARAMETERS__
|
|
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
################################################################################
|
|
|
|
# Pgbouncer (EE only)
|
|
|
|
# Pgbouncer (EE only)
|
|
|
|
# See [GitLab PgBouncer documentation](https://docs.gitlab.com/ee/administration/postgresql/pgbouncer.html)
|
|
|
|
# See the GitLab PgBouncer documentation: https://docs.gitlab.com/ee/administration/postgresql/pgbouncer.html
|
|
|
|
# See the [PgBouncer page](https://pgbouncer.github.io/config.html) for details
|
|
|
|
# See the PgBouncer page http://www.pgbouncer.org/config.html for details
|
|
|
|
################################################################################
|
|
|
|
################################################################################
|
|
|
|
# pgbouncer['enable'] = false
|
|
|
|
# pgbouncer['enable'] = false
|
|
|
|
# pgbouncer['log_directory'] = '/var/log/gitlab/pgbouncer'
|
|
|
|
# pgbouncer['log_directory'] = '/var/log/gitlab/pgbouncer'
|
|
|
|
@ -3459,7 +3459,7 @@ package['modify_kernel_parameters'] = __MODIFY_KERNEL_PARAMETERS__
|
|
|
|
### Service desk email
|
|
|
|
### Service desk email
|
|
|
|
###! Allow users to create new service desk issues by sending an email to
|
|
|
|
###! Allow users to create new service desk issues by sending an email to
|
|
|
|
###! service desk address.
|
|
|
|
###! service desk address.
|
|
|
|
###! Docs: https://docs.gitlab.com/ee/user/project/service_desk.html
|
|
|
|
###! Docs: https://docs.gitlab.com/ee/user/project/service_desk/index.html
|
|
|
|
# gitlab_rails['service_desk_email_enabled'] = false
|
|
|
|
# gitlab_rails['service_desk_email_enabled'] = false
|
|
|
|
|
|
|
|
|
|
|
|
#### Service Desk Mailbox Settings (via `mail_room`)
|
|
|
|
#### Service Desk Mailbox Settings (via `mail_room`)
|
|
|
|
|
Kayou
GitHub