<!> Status: Entwurf

Gitlab

Informationen zu Gitlab.

Installation

Installation auf Basis des installierten Release. 

aptitude install gitlab

Installation aus stretch-backports. 

aptitude -t stretch-backports install gitlab

stretch-backports

{i} Hinweis: 2019-02-03: gitlab (11.2.8+dfsg-2~bpo9+2) Nach dem Entpacken werden 433 MB zusätzlich belegt sein.

Konfiguration

Apache2

<IfModule mod_ssl.c>                   
        <VirtualHost _default_:443>                                                                                                                     
  SSLEngine on               
  SSLProtocol all -SSLv2     
  SSLHonorCipherOrder on     
  SSLCipherSuite "ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS"
  Header add Strict-Transport-Security: "max-age=15768000;includeSubdomains"
  SSLCompression Off                                         
                     
  SSLCertificateFile /etc/yourcert.pem
  SSLCertificateKeyFile /etc/yourkey.pem
                                                                              
  ServerName sub.domain.tld                                                 
  ServerSignature Off                                       

  ProxyPreserveHost On
  AllowEncodedSlashes NoDecode

  <Location />                              
    Require all granted                                                                                                             
    ProxyPassReverse http://127.0.0.1:8080     
    ProxyPassReverse http://sub.domain.tld/
  </Location>                                         

  RewriteEngine on
  RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-f [OR]
  RewriteCond %{REQUEST_URI} ^/uploads/.*                                                                                                                              
  RewriteCond "%{HTTP_HOST}"   "^sub\.domain\.tld" [NC]
  RewriteRule .*  http://127.0.0.1:8080%{REQUEST_URI} [P,QSA,NE]                 
                                            
  RequestHeader set X_FORWARDED_PROTO 'https'          
  RequestHeader set X-Forwarded-Ssl on      
                                                       
  DocumentRoot /var/lib/gitlab/public

  ErrorDocument 404 /404.html
  ErrorDocument 422 /422.html    
  ErrorDocument 500 /500.html                                  
  ErrorDocument 502 /502.html
  ErrorDocument 503 /503.html
                                                                                                                                                
  LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b" common_forwarded  
  ErrorLog /var/log/apache2/sub.domain.tld_error.log                    
  CustomLog /var/log/apache2/sub.domain.tld_forwarded.log common_forwarded
  CustomLog /var/log/apache2/sub.domain.tld_access.log combined env=!dontlog
  CustomLog /var/log/apache2/sub.domain.tld.log combined
                                                          
        </VirtualHost>   
</IfModule>