DevOps: GitLab

Docs:

Installing GitLab with Omnibus packages | GitLab

Download and install GitLab | GitLab Read first

dnf install postfix && systemctl enable --now postfix

/etc/gitlab/gitlab.rb:

external_url 'https://gitlab.lewd.lip'

gitlab_rails['initial_root_password'] = 'moderate0!'
gitlab_rails['initial_shared_runners_registration_token'] = 'token'
#---------------------------------------------------------------------
#---------------------------------------------------------------------
# Let's Encrypt Integration
#---------------------------------------------------------------------

#---------------------------------------------------------------------
# Nginx Doc: https://docs.gitlab.com/omnibus/settings/nginx.html
#---------------------------------------------------------------------
nginx['enable'] = true
nginx['client_max_body_size'] = '250m'
# Listen on all IPv4 and IPv6 addresses
nginx['listen_addresses'] = ['0.0.0.0', '[::]']
registry_nginx['listen_addresses'] = ['*', '[::]']
mattermost_nginx['listen_addresses'] = ['*', '[::]']
pages_nginx['listen_addresses'] = ['*', '[::]']
# Listen on all IPv4 and IPv6 addresses
# HTTPS
nginx['ssl_verify_client'] = 'off'
nginx['http2_enabled'] = true
nginx['ssl_prefer_server_ciphers'] = 'on'
nginx['ssl_protocols'] = 'TLSv1.2 TLSv1.3'
nginx['redirect_http_to_https_port'] = 80
nginx['redirect_http_to_https'] = true
registry_nginx['redirect_http_to_https'] = true
mattermost_nginx['redirect_http_to_https'] = true
# mkdir -p /etc/gitlab/pki; chmod 755 /etc/gitlab/pki; cp gitlab.lewd.lip.{key,crt} /etc/gitlab/pki
nginx['ssl_certificate'] = '/etc/gitlab/pki/gitlab.lewd.lip.crt'
nginx['ssl_certificate_key'] = '/etc/gitlab/pki/gitlab.lewd.lip.key'
nginx['ssl_dhparam'] = '/etc/gitlab/pki/dhparam.pem'
# HTTPS
nginx['proxy_set_headers'] = {
  'Host' => '$http_host_with_default',
  'Connection' => '$connection_upgrade',
  'Upgrade' => '$http_upgrade',
  'X-Forwarded-For' => '$proxy_add_x_forwarded_for',
  'X-Forwarded-Proto' => 'https',
  'X-Forwarded-Ssl' => 'on',
  'X-Real-IP' => '$remote_addr'
}
# HSTS HTTP Strict Transport Security
nginx['hsts_max_age'] = 63072000
nginx['hsts_include_subdomains'] = false
# HSTS HTTP Strict Transport Security
nginx['referrer_policy'] = 'strict-origin-when-cross-origin'
nginx['gzip_enabled'] = true
nginx['hide_server_token'] = 'on'
nginx['status'] = {
  'listen_addresses' => ['127.0.0.1'],
  'fqdn' => 'gitlab.lewd.lip',
  'port' => 9999,
  'options' => {
    'server_tokens' => 'on',
    'access_log' => 'on', # Disable logs for stats
    'allow' => '127.0.0.1', # Only allow access from localhost
    'deny' => 'all' # Deny access to anyone else
  }
}

Email配置:

#---------------------------------------------------------------------
# SMTP Doc: https://docs.gitlab.com/omnibus/settings/smtp.html
#---------------------------------------------------------------------
gitlab_rails['smtp_enable'] = true
gitlab_rails['smtp_address'] = 'smtp.163.com'
gitlab_rails['smtp_port'] = 465
gitlab_rails['smtp_user_name'] = 'alert@lewd.lip'
gitlab_rails['smtp_password'] = 'moderate0!'
gitlab_rails['smtp_domain'] = 'lewd.lip'
gitlab_rails['smtp_authentication'] = 'login'
gitlab_rails['smtp_enable_starttls_auto'] = true
gitlab_rails['smtp_tls'] = true
gitlab_rails['smtp_pool'] = true
gitlab_rails['gitlab_email_enabled'] = true
gitlab_rails['gitlab_email_from'] = 'alert@lewd.lip'
gitlab_rails['gitlab_email_display_name'] = 'Annexationer Display Name'
gitlab_rails['gitlab_email_reply_to'] = 'alert@lewd.lip'
gitlab_rails['gitlab_email_subject_suffix'] = '@'


# Test        gitlab-rails console
Notify.test_email('destination_email@address.com', 'Message Subject', 'Message Body').deliver_now