d3305df7aa
Experimental support for gitlab-git-http-server
...
https://gitlab.com/gitlab-org/gitlab-git-http-server
This change introduces the GITLAB_GRACK_AUTH_ONLY environment
variable. When set, Grack requests to GitLab will only respond with
the user's GL_ID (if the request is OK) or an error. This allows
gitlab-git-http-server to use the main GitLab application as an
authentication and authorization backend.
If we like how this works we should drop the GITLAB_GRACK_AUTH_ONLY
variable at some point in the future.
2015-07-28 14:33:19 +02:00
83304bf410
Merge pull request #9400 from tuxillo/patch-1
...
Use whoami instead of $USER
2015-07-20 11:45:34 +02:00
bcb07929fe
Merge branch 'nginx_defaulthost_documentation' into 'master'
...
Close #178 Nginx conf default_host documentation
This closes #178
We're just making it clear that some nginx installs such as by default on recent Ubuntu's, the /etc/nginx/sites-enabled/default file will conflict the listen line of the gitlab nginx conf's due to the default_server directive.
changed installation.md to identify the issue to a user
added notes to both nginx configs for gitlab and gitlab-ssl
[ci-skip
See merge request !225
2015-06-22 13:22:58 +00:00
e9ef274bb2
Use whoami instead of $USER
...
- Use whoami instead of relying on the existence of $USER enviroment variable which is not always present
2015-06-19 09:01:35 +02:00
86d35ed3d4
Update SSL ciphers per logjam vulnerability recommendations.
2015-06-15 11:40:00 +02:00
df346e9507
Add a note that changing example configuration files requires changing omnibus-gitlab.
2015-06-11 15:11:37 +02:00
c4cb563e98
Merge pull request #8730 from drunkard/master
...
Specify shell while run me as git user
2015-06-02 16:19:31 +02:00
ef351f4cf4
Improve comments for shell_path
2015-05-04 16:46:16 +08:00
6235b027ec
Fix typo
2015-03-14 10:22:06 +01:00
d513ca584a
Revert "Merge branch 'go-get-workaround-nginx' of https://github.com/mattes/gitlabhq into mattes-go-get-workaround-nginx"
...
This reverts commit 51349ca3c8b180476bd6
2015-03-03 11:21:48 +01:00
51349ca3c8
Merge branch 'go-get-workaround-nginx' of https://github.com/mattes/gitlabhq into mattes-go-get-workaround-nginx
...
Conflicts:
lib/support/nginx/gitlab
lib/support/nginx/gitlab-ssl
2015-02-20 15:47:34 -08:00
26d57a648c
Restore nginx config a little more.
2015-02-20 23:32:39 +01:00
08874d2b51
Make changes to nginx config less likely to break something.
2015-02-20 23:27:17 +01:00
eb210f4a18
Modify nginx config to let /uploads go through to unicorn.
2015-02-20 12:22:53 +01:00
4c5adb702c
Specify shell while run me as git user
...
Some users disabled "git" user's shell after finished installation, this
will lead to "This account is currently not available" and could not
run /etc/init.d/gitlab, this dirty trick fix it.
Signed-off-by: Drunkard Zhang <gongfan193@gmail.com>
2015-02-04 09:36:51 +08:00
2c9b357324
remove optional html tags
2014-12-31 18:37:31 -08:00
56f211aa50
allow for private repositories
2014-12-31 18:37:31 -08:00
e338e85d1b
fixed typo
2014-12-03 13:35:27 +00:00
32c6fe5385
adding notes to gitlab nginx conf
...
We want to make users aware that the nginx default config will conflict
with the gitlab default_server conf file.
2014-12-03 10:43:27 +00:00
434c4a2b5d
Socket [::]:123 on Linux listens on IPv4 and IPv6
...
This will ensure nginx starts up without the following errors messages:
nginx: [emerg] bind() to [::]:443 failed (98: Address already in use)
nginx: [emerg] bind() to [::]:443 failed (98: Address already in use)
nginx: [emerg] bind() to [::]:443 failed (98: Address already in use)
nginx: [emerg] bind() to [::]:443 failed (98: Address already in use)
nginx: [emerg] bind() to [::]:443 failed (98: Address already in use)
nginx: [emerg] still could not bind()
Googling for them leads you to this site:
https://chrisjean.com/2014/02/10/fix-nginx-emerg-bind-to-80-failed-98-address-already-in-use/
2014-11-26 00:31:50 +01:00
70f30abd84
Merge pull request #8273 from bbodenmiller/nginx-updates
...
Nginx updates
2014-11-10 10:20:44 +01:00
271a352079
minor updates & formatting changes
...
minor updates @ formatting changes to match other versions of file.
Unify formatting of
https://github.com/gitlabhq/gitlabhq/blob/master/lib/support/nginx/gitlab ,
https://github.com/gitlabhq/gitlabhq/blob/master/lib/support/nginx/gitlab-ssl ,
&
https://gitlab.com/gitlab-org/omnibus-gitlab/blob/master/files/gitlab-cookbooks/gitlab/templates/default/nginx-gitlab-http.conf.erb
2014-11-08 23:33:27 -08:00
e3098b69e7
Don't enable IPv4 *only* on nginx.
...
The current configuration sample files only enable IPv4 by default, making the
server inaccesible for many remote hosts (and an increasing amount every day).
Enable IPv4 and IPv6 by default. Older servers with no external IPv6
connectivity will not fail since they'll have a local-link IPv6 address to bind
to anyway.
2014-11-03 11:25:31 -03:00
80e944ac71
Merge pull request #8054 from bbodenmiller/patch-4
...
match latest config from https://cipherli.st/
2014-10-22 16:52:42 +03:00
077fc683fa
simplify DHE parameter generation
2014-10-16 14:34:03 -07:00
5d7e1b6ae2
match latest config from https://cipherli.st/
2014-10-15 23:51:53 -07:00
be14c7a83f
Add a comment on why we are using backward compatible ciphers.
2014-10-10 09:44:08 +02:00
8ddb2be69a
Revert "update ssl_ciphers"
...
This reverts commit c41e5f5018
2014-10-10 09:38:39 +02:00
0cc30145f4
Merge pull request #7664 from bbodenmiller/patch-2
...
add HSTS Policy warning
2014-10-03 12:12:23 +02:00
25ee53c3ae
fail_timeout=0 as recommended by Unicorn
...
Set's fail_timeout=0 as recommended by
http://unicorn.bogomips.org/Unicorn/Configurator.html#method-i-timeout
when Unicorn is running behind nginx.
2014-09-12 02:19:38 -07:00
69c4026ec1
Merge pull request #7654 from bbodenmiller/patch-13
...
update ssl_ciphers
2014-09-08 15:07:59 +02:00
bef923055b
Merge pull request #7583 from bbodenmiller/https
...
[Documentation] simplify HTTPS setup details
2014-09-08 11:05:19 +02:00
a2b36858f5
add optional nginx configs to make more secure
2014-09-07 23:17:37 -07:00
5d5d4ef91a
simplify HTTPS setup details
...
also adds comment about updating nginx files during upgrades
2014-09-07 15:31:13 -07:00
c41e5f5018
update ssl_ciphers
...
taken from
https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html /
https://cipherli.st/
backwards compatible ciphers not needed since gitlab does not support
ie8
2014-09-07 14:55:11 -07:00
765eabeacc
add HSTS Policy warning
...
Add warning about HSTS header as it means user will need to provide secure connection access to site for next 24 months from page view. See https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security for more details.
2014-09-01 15:47:15 -07:00
3069826d1a
Merge pull request #7378 from jojosch/nginx-ssl-redirect
...
Use a ? after the $request_uri to perform a valid Redirect while cloning...
2014-08-28 16:54:36 +03:00
eddfdc9edd
Merge pull request #7558 from bbodenmiller/patch-4
...
change X-Frame-Options to SAMEORIGIN for nginx SSL config
2014-08-23 23:50:09 +03:00
3663354cb9
unify nginx config files
2014-08-23 01:08:12 -07:00
a3953a46f4
change X-Frame-Options to SAMEORIGIN
...
needed to allow sidekiq to load on background jobs tab
2014-08-23 01:05:31 -07:00
b5481afd73
Use a ? after the $request_uri to perform a valid Redirect while cloning.
...
fixes #6203
before:
❯ curl -I http://gitlab/namespace/repo.git/info/refs?service=git-upload-pack
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Jul 2014 18:20:27 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://gitlab/namespace/repo.git/info/refs?service=git-upload-pack?service=git-upload-pack
after:
❯ curl -I http://gitlab/namespace/repo.git/info/refs\?service=git-upload-pack
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Jul 2014 18:23:54 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://gitlab/namespace/repo.git/info/refs?service=git-upload-pack
[ci skip]
2014-08-23 08:36:25 +02:00
06fade7545
Simplify the description of single hash lines based on comments of Ben Bodenmiller.
2014-08-22 19:10:07 +02:00
8aff39a6d0
Simplify the ssl setup file.
2014-08-04 15:57:59 +02:00
7be6b8ca73
Move gitlab-ssl nginx config from gitlab-recipes
2014-06-05 16:54:50 +03:00
fdcc5ddec1
Ensure sidekiq is displayed by setting X-Frame-Options.
2014-06-03 17:06:27 +02:00
7a75b3f300
Merge pull request #6986 from agjmills/master
...
added SYSV chkconfig property so gitlab starts after MySQLd / nginx
2014-05-30 16:58:37 +03:00
2341cefd6f
Move from script to bin directory.
2014-05-27 17:14:41 +02:00
821ab16846
added SYSV chkconfig property so gitlab starts after MySQLd / nginx
2014-05-16 10:29:12 +01:00
636ec6d3a0
Update warnings about relative url support.
2014-05-13 17:59:08 +02:00
5307dd5f74
Comment gzip: off be default
2014-04-07 15:47:20 +00:00
Jacob Vosmaer
Dmitriy Zaporozhets
Antonio Huete Jimenez
Marin Jankovski
Drunkard Zhang
Vasilij Schneidermann
Douwe Maan
mattes
Luke Ashe-Browne
sbeh
Ben Bodenmiller
Hugo Osvaldo Barrera
Sytse Sijbrandij
johannes
Achilleas Pipinellis
GitLab
Marin Jankovski
Alexander Mills