28 Commits

Author SHA1 Message Date
Kazunori Kimura
a9b4feb77b add NGINX_CUSTOM_GITLAB_SERVER_CONFIG 2022-03-04 22:49:52 +09:00
Michal Galet
d2263980ea Obfuscate access_token and private_token in nginx access log
Authentication tokens are allowed to be part of URI and therefore they are printed
in the access log. This can be a security concern especially when system and
application logs are being send to an external logging system (syslog, wazuh,
splunk, etc.).
2020-06-24 13:33:04 +02:00
Niclas Mietz
f1c0cb372e Merge pull request #1137 from 3kami3/real_ip
Add $NGINX_REAL_IP_RECURSIVE and $NGINX_REAL_IP_TRUSTED_ADDRESSES
2017-07-23 13:20:17 +02:00
3kami3
521f632c06 Add $NGINX_REAL_IP_RECURSIVE and $NGINX_REAL_IP_TRUSTED_ADDRESSES
Configuring GitLab trusted_proxies and the NGINX real_ip module.
2017-03-20 21:21:47 +09:00
solidnerd
5732e644e1 Update NGINX configuration files to add websocket support 2016-12-25 22:50:27 +08:00
Sameer Naik
ce7b036dec Revert "nginx" updated configs"
This reverts commit 48cf19f9571cc5519908ee2d5ae0df71a9e5871e.

Closes #800
2016-07-26 11:02:19 +05:30
SolidNerd
6614140eae Fix Host header in nginx configuration
This will fix the problem if you don't use the typical HTTP/HTTPS ports otherwise nginx will redirects you with the default ports of HTTP/HTTPS .
2016-07-23 12:35:21 +02:00
Sameer Naik
48cf19f957 nginx" updated configs 2016-07-23 14:08:19 +05:30
SolidNerd
70dc29de1a Use tcp for workhorse communication.
Signed-off-by: SolidNerd <niclas@mietz.io>
2016-07-17 09:28:24 +02:00
Sameer Naik
c1f8c1373d updated gitlab vhost nginx configuration templates 2016-06-01 08:33:07 +05:30
Sameer Naik
aefad44659 removed nginx hack for relative_url support 2016-03-27 11:18:49 +05:30
Sameer Naik
6c607a4310 assets:precompile moved back to build time 2016-01-23 20:16:16 +05:30
Sameer Naik
36d6c7eda8 moved execution of assets:precompile raketask to runtime
GitLab 8.4.0 requires a working database connection while executing the
`assets:precompile` raketask. As a result the execution of the rake task
is postponed to execute at runtime with the assets cached in the data
volume. This adds a noticable increase in the container startup time.
2016-01-23 13:23:57 +05:30
Sameer Naik
cd18eb156a proxy pass requests to static assets to gitlab unicorn
When relative_url is in used, the links to assets in the
`application.css` file to not have the relative_url prefix. To fix this
we proxy pass asset requests to the upstream gitlab unicorn.

Fixes #521
2015-12-24 15:15:53 +05:30
Sameer Naik
de94d95cee remove trailing / from location block when relative_url is used 2015-12-24 15:05:32 +05:30
Sameer Naik
607928ffcc gitlab: upgrade to CE v8.3.0 2015-12-22 11:19:27 +05:30
Sameer Naik
208f95e246 relative_url_root should not be set when GITLAB_RELATIVE_URL_ROOT is
not used

Fixes #541
2015-12-22 10:35:56 +05:30
Sameer Naik
a42963c24d fix relative_url access without trailing / in url 2015-12-13 21:15:23 +05:30
Sameer Naik
cd8f3c1aa4 add Strict-Transport-Security header even when https is configured at the load balancer
Refer #417
2015-12-13 12:31:28 +05:30
Sameer Naik
b07697f6ff moved X-Accel-Buffering header inside server block
Closes #417
2015-12-13 12:29:06 +05:30
Sameer Naik
4830ce9aef renamed template value YOUR_SERVER_FQDN to GITLAB_HOST in the nginx configs 2015-12-12 16:32:14 +05:30
Sameer Naik
ed1228fdd0 removed GITLAB_RELATIVE_URL_ROOT__with_trailing_slash placeholders from nginx configs 2015-12-12 16:14:28 +05:30
Sameer Naik
992ff99712 nginx: fix nginx configs for static assets 2015-12-10 17:45:05 +05:30
Sameer Naik
ae1706d01c route assets/ requests to the gitlab application when relative_url used
Fixes #531
Refer #521
2015-12-09 21:13:51 +05:30
Sameer Naik
50356f4389 gitlab: upgrade to CE v8.2.2 2015-12-03 12:17:39 +05:30
Sameer Naik
a321bc14cd gitlab: upgrade to CE v8.2.0 2015-11-22 12:26:39 +05:30
Sameer Naik
d98b93ffc1 gitlab-workhorse: upgrade to v.0.4.2
Module formerly known as gitlab-git-http-server
2015-11-22 12:10:27 +05:30
Sameer Naik
50e13e5fc4 Restructured repo and code for better readability and maintenance 2015-11-17 22:20:05 +05:30