Commit Graph

72 Commits

Author SHA1 Message Date
astrachan e204554057 Update root default email address to current value 2019-07-19 12:15:23 +10:00
Achilleas Pipinellis 698864df12 Clean-up some confusing info from security docs 2019-07-16 07:02:20 +00:00
Marcel Amirault 74a8d30090 Fix whitespace in user, and misc, docs
Many code blocks are 4spaced, and they render in GitLab
without coloring as a result, even though they are
fenced with a language label. If in a list, other items
woll render as being in a code block too, even if not
meant to. This fixes all these issues, and cleans up
minor whitespace issues in /user, /security, /ssh
and /migrate_ci_to_ce docs.
2019-07-15 03:02:30 +00:00
Marcel Amirault 4121c63676 Remove extra blank lines from docs
Removing extra blank lines in docs that serve
no purpose, as well as some --- lines that also
are not needed.
2019-07-15 01:04:35 +00:00
Marcel Amirault 3ee846c9db Remove trailing whitespace in docs
Remove unneeded trailing whitespace in lines in
/security /workflow /user docs
2019-07-15 00:46:34 +00:00
Stan Hu 82c31a9add Support CIDR notation in IP rate limiter
This will make it possible to whitelist multiple IP addresses
(e.g. 192.168.0.1/24).
2019-06-27 23:16:11 -07:00
Roger Meier 35d928c4a9 refactor: apply "require 2FA" to all subgroup and ancestor group members, when changing 2019-06-13 08:43:14 +02:00
Mike Lewis 58d520084c Update links in information_exclusivity.md 2019-06-09 19:55:42 +00:00
Matt Penna 666ee9f19b Corrected links to use absolute path names 2019-06-07 16:56:54 -04:00
Matt Penna fc87880c96 Added links to pertinent GitLab docs
Clarified who can push to a protected branch
2019-06-07 16:56:40 -04:00
Matt Penna be1d1c7043 Apply suggestion to doc/security/webhooks.md 2019-06-07 19:27:48 +00:00
Matt Penna 6fb7ced579 Apply suggestion to doc/security/rack_attack.md 2019-06-07 19:27:27 +00:00
Matt Penna 7d4cf82ee3 Updated security docs
Changes include:

- Added front matter

- Added Troubleshooting header

- Shorted long lines

- Corrected typos and improved clarity throughout
2019-06-07 12:39:22 -04:00
Matt Penna bf92601093 Various edits to security documentation
Edits to conform with CE epic 1280 SSOT standards, other improvements
2019-06-07 12:38:35 -04:00
Achilleas Pipinellis fc925583da Add type to frontmatter 2019-06-07 13:55:22 +00:00
Evan Read d650c30837 Clarify and improve 2FA configuration information 2019-06-05 19:20:26 +00:00
Mayra Cabrera ed8ebc635a Changes RackAttack logger to use structured logs
Creates a new filename to register auth logs.
This change should allow SRE's queries to make better queries
through logging infrastructure.

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/54528
2019-05-24 00:45:02 +00:00
Tristan Williams 5829bf8578 Docs: add details about restricted SSH keys 2019-02-22 16:55:43 +00:00
Marcel Amirault e145e15f23 Docs: Misc small fixes to docs 2019-02-12 12:45:20 +00:00
Evan Read c2c2d04b3a Fix most instances of bare URLs in markdown 2019-01-24 06:52:33 +00:00
Rémy Coutable 787d9c47e7 Merge branch 'patch-31' into 'master'
GitLab 11.4.3 "Outbound requests" setting path

See merge request gitlab-org/gitlab-ce!22898
2019-01-14 17:24:11 +00:00
Evan Read d98560c1f5 Make unordered lists conform to styleguide
- Also makes other minor Markdown fixes that were near the main fixes.
2019-01-08 12:21:09 +10:00
Matt Rice 36426fe578 Update doc/security/rack-attack.md 2018-12-11 16:49:47 +00:00
Salman Mohammadi 75dc0c6cc2 fix: update the link to the new address.
this change eliminates the need to redirect the page.
2018-12-04 00:01:47 +00:00
Illan RUL-DA CUNHA 3dbf83fe46 Precisions about the times specified in gitlab.rb for Rack Attack 2018-11-20 16:44:15 +00:00
Evan Read 20146580a0 Resolve Markdown ordered lists not conforming to styleguide 2018-11-13 10:53:38 +10:00
Thunk 744759e404 GitLab 11.4.3 "Outbound requests" setting path 2018-11-08 07:04:57 +00:00
Marcel Amirault fd7358a8cd Correct Gitlab to GitLab in docs 2018-09-25 04:57:57 +00:00
Marcel Amirault 109cfd951d
Correct grammar (setup to set-up) in Docs 2018-09-21 16:29:14 +02:00
Yannick Binnenweg 735da8dde7
Fix minor error in doc/security/user_email_confirmation.md
Originally submitted at
https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/3190.

Signed-off-by: Rémy Coutable <remy@rymai.me>
2018-08-29 17:35:41 +02:00
Aaron e7a4c3576e
Add instructions to unlock an account
Originally submitted at
https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/6578.

Signed-off-by: Rémy Coutable <remy@rymai.me>
2018-08-29 17:35:36 +02:00
Achilleas Pipinellis 8dbcd11075
Compress all PNG images under doc/
The pngquant tool was used https://pngquant.org, and particularly, the
following command:

        /usr/bin/pngquant -f --skip-if-larger --ext .png --speed 1 image.png

Before: 47584K
After : 34924K
2018-08-27 15:52:03 +02:00
Douwe Maan 9aa07a7ec2 Merge branch 'update-rack-attack-deprecation-note-in-docs' into 'master'
Adds rack attack disabled by default notice to documentation

See merge request gitlab-org/gitlab-ce!20833
2018-07-25 09:41:48 +00:00
Tiago Botelho f0f285efc2 Adds rack attack disabled by default notice to documentation 2018-07-25 09:48:02 +01:00
Tiago Botelho 54b38529be Fix Rack Attack documentation to reflect the feature being disabled by default 2018-07-25 09:43:44 +01:00
Mark Chao 15469fe0a1 doc 2018-06-06 21:01:44 +09:00
Francisco Javier López 6d3121bed3 Improve documentation of SSRF protection 2018-04-24 10:21:50 +00:00
Cindy Pallares 🦉 79cefbf1d9 Update rack attack docs 2018-01-23 13:07:59 +00:00
Achilleas Pipinellis 69b4c5c011 Exclude comments from specific docs 2017-11-01 15:56:40 +00:00
Nick Thomas 29b40db589 More review comments 2017-08-30 21:20:00 +01:00
Nick Thomas b84ca08e35 Address review comments 2017-08-30 20:50:44 +01:00
Nick Thomas 6847060266 Rework the permissions model for SSH key restrictions
`allowed_key_types` is removed and the `minimum_<type>_bits` fields are
renamed to `<tech>_key_restriction`. A special sentinel value (`-1`) signifies
that the key type is disabled.

This also feeds through to the UI - checkboxes per key type are out, inline
selection of "forbidden" and "allowed" (i.e., no restrictions) are in.

As with the previous model, unknown key types are disallowed, even if the
underlying ssh daemon happens to support them. The defaults have also been
changed from the lowest known bit size to "no restriction". So if someone
does happen to have a 768-bit RSA key, it will continue to work on upgrade, at
least until the administrator restricts them.
2017-08-30 20:50:44 +01:00
Nick Thomas b0f982fbdf Add settings for minimum key strength and allowed key type
This is an amalgamation of:

* Cory Hinshaw: Initial implementation !5552
* Rémy Coutable: Updates !9350
* Nick Thomas: Resolve conflicts and add ED25519 support !13712
2017-08-30 20:50:44 +01:00
Markus Koller a3430f011f Support 2FA requirement per-group 2017-04-06 10:01:13 +02:00
Achilleas Pipinellis 8063628b90 Move webhooks to new a location under Integrations 2017-02-03 19:26:48 +01:00
Achilleas Pipinellis af1dabe805 Reduce size of images from 25MB to 13MB using pngquant
Took it from https://gitlab.com/gitlab-com/www-gitlab-com/merge_requests/3232

[ci skip]
2016-11-22 19:53:43 +01:00
Peter Dave Hello 9e6f99744e
optimize png images losslessly using zopflipng 2016-06-29 19:22:15 +08:00
Felipe Artur 7bb84e6497 Change landing page when skipping confirmation email and add documentation 2016-05-16 14:56:32 -03:00
Anatoly Borodin 6c06b65d1e Use relative links in `doc`, fix broken generated HTML links
Links like (doc/web_hooks/web_hooks.md) work in the GitLab source code
web interface, but the HTML generator produces broken links in the `doc`
subdirectories:
http://doc.gitlab.com/ce/hooks/doc/web_hooks/web_hooks.html
instead of the right one
http://doc.gitlab.com/ce/web_hooks/web_hooks.html
in
http://doc.gitlab.com/ce/hooks/custom_hooks.html.

Fixes #14338

[ci skip]

Signed-off-by: Anatoly Borodin <anatoly.borodin@gmail.com>
2016-03-17 00:35:53 +01:00
ashleys 4cd9a5208c web hooks to webhooks 2016-03-10 14:48:29 -05:00