gitlab添加http协议修改https

1.修改配置文件

       vi /etc/gitlab/gitlab.rb

　　1.1.external_url    http属性修改为https:

        external_url 'https://ip:port'

       1.2.nginx配置这几个参数设置为

      nginx['redirect_http_to_https'] =true

      nginx['ssl_certificate'] = "/etc/gitlab/ssl/server.crt"

      nginx['ssl_certificate_key'] = "/etc/gitlab/ssl/server.key"

 

2.生成秘钥与证书

   

 #秘钥脚本，将以下内容保存为shell脚本，然后运行
 #出现提示输入信息的地方输入信息，先输入域名然后4次证书密码，任意密码，四次保持一致。

 #!/bin/sh

 # create self-signed server certificate:
 
 read -p "Enter your domain [192.168.79.128]: " DOMAIN
 
 echo "Create server key..."
 
 openssl genrsa -des3 -out $DOMAIN.key 1024
 
 echo "Create server certificate signing request..."
 
 SUBJECT="/C=US/ST=Mars/L=iTranswarp/O=iTranswarp/OU=iTranswarp/CN=$DOMAIN"
 
 openssl req -new -subj $SUBJECT -key $DOMAIN.key -out $DOMAIN.csr
 
 echo "Remove password..."
 
 mv $DOMAIN.key $DOMAIN.origin.key
 openssl rsa -in $DOMAIN.origin.key -out $DOMAIN.key
 
 echo "Sign SSL certificate..."
 
 openssl x509 -req -days 3650 -in $DOMAIN.csr -signkey $DOMAIN.key -out $DOMAIN.crt
 
 echo "TODO:"
 echo "Copy $DOMAIN.crt to /etc/nginx/ssl/$DOMAIN.crt"
 echo "Copy $DOMAIN.key to /etc/nginx/ssl/$DOMAIN.key"
 echo "Add configuration in nginx:"
 echo "server {"
 echo "    ..."
 echo "    listen 443 ssl;"
 echo "    ssl_certificate     /etc/nginx/ssl/$DOMAIN.crt;"
 echo "    ssl_certificate_key /etc/nginx/ssl/$DOMAIN.key;"
 echo "}"

执行成功后生成文件如下：

 

移动到gitlab相应的位置

sudo mkdir -p /etc/gitlab/ssl

sudo chmod 700 /etc/gitlab/ssl/ -R

sudo cp 192.168.79.128.crt /etc/gitlab/ssl/server.crt

sudo cp 192.168.79.128.key /etc/gitlab/ssl/server.key

 

准备完毕,gitlab配置重启

gitlab-ctl reconfigure

gitlab-ctl restart

 

登录地址:https://192.168.79.128:8989/

如下图:

 

 原来的http服务将访问不了,如图: