summaryrefslogtreecommitdiff
path: root/lib/support
Commit message (Collapse)AuthorAgeFilesLines
* Merge branch 'nginx_defaulthost_documentation' into 'master'Dmitriy Zaporozhets2015-06-222-0/+8
|\ | | | | | | | | | | | | | | | | | | | | | | | | Close #178 Nginx conf default_host documentation This closes #178 We're just making it clear that some nginx installs such as by default on recent Ubuntu's, the /etc/nginx/sites-enabled/default file will conflict the listen line of the gitlab nginx conf's due to the default_server directive. changed installation.md to identify the issue to a user added notes to both nginx configs for gitlab and gitlab-ssl [ci-skip See merge request !225
| * fixed typoLuke Ashe-Browne2014-12-031-2/+2
| |
| * adding notes to gitlab nginx confLuke Ashe-Browne2014-12-032-1/+9
| | | | | | | | | | We want to make users aware that the nginx default config will conflict with the gitlab default_server conf file.
* | Update SSL ciphers per logjam vulnerability recommendations.update_ssl_ciphersMarin Jankovski2015-06-151-1/+1
| |
* | Add a note that changing example configuration files requires changing ↵note_about_omnibus_changesMarin Jankovski2015-06-112-2/+14
| | | | | | | | omnibus-gitlab.
* | Merge pull request #8730 from drunkard/masterMarin Jankovski2015-06-022-1/+7
|\ \ | | | | | | Specify shell while run me as git user
| * | Improve comments for shell_pathDrunkard Zhang2015-05-041-3/+2
| | |
| * | Specify shell while run me as git userDrunkard Zhang2015-02-042-1/+8
| |/ | | | | | | | | | | | | | | Some users disabled "git" user's shell after finished installation, this will lead to "This account is currently not available" and could not run /etc/init.d/gitlab, this dirty trick fix it. Signed-off-by: Drunkard Zhang <gongfan193@gmail.com>
* | Fix typoVasilij Schneidermann2015-03-141-1/+1
| |
* | Revert "Merge branch 'go-get-workaround-nginx' of ↵Douwe Maan2015-03-032-20/+0
| | | | | | | | | | | | | | https://github.com/mattes/gitlabhq into mattes-go-get-workaround-nginx" This reverts commit 51349ca3c83c56e072f87253d375316f7164b49a, reversing changes made to b180476bd69bdf99b1727b041116fa8447c0201f.
* | Merge branch 'go-get-workaround-nginx' of https://github.com/mattes/gitlabhq ↵Marin Jankovski2015-02-202-0/+20
|\ \ | | | | | | | | | | | | | | | | | | | | | into mattes-go-get-workaround-nginx Conflicts: lib/support/nginx/gitlab lib/support/nginx/gitlab-ssl
| * | remove optional html tagsmattes2014-12-312-12/+2
| | |
| * | allow for private repositoriesmattes2014-12-312-0/+30
| |/
* | Restore nginx config a little more.Douwe Maan2015-02-202-0/+2
| |
* | Make changes to nginx config less likely to break something.Douwe Maan2015-02-202-35/+66
| |
* | Modify nginx config to let /uploads go through to unicorn.Douwe Maan2015-02-202-37/+47
| |
* | Socket [::]:123 on Linux listens on IPv4 and IPv6sbeh2014-11-261-2/+2
|/ | | | | | | | | | | | This will ensure nginx starts up without the following errors messages: nginx: [emerg] bind() to [::]:443 failed (98: Address already in use) nginx: [emerg] bind() to [::]:443 failed (98: Address already in use) nginx: [emerg] bind() to [::]:443 failed (98: Address already in use) nginx: [emerg] bind() to [::]:443 failed (98: Address already in use) nginx: [emerg] bind() to [::]:443 failed (98: Address already in use) nginx: [emerg] still could not bind() Googling for them leads you to this site: https://chrisjean.com/2014/02/10/fix-nginx-emerg-bind-to-80-failed-98-address-already-in-use/
* Merge pull request #8273 from bbodenmiller/nginx-updatesMarin Jankovski2014-11-102-16/+15
|\ | | | | Nginx updates
| * minor updates & formatting changesBen Bodenmiller2014-11-082-16/+15
| | | | | | | | | | | | | | | | | | minor updates @ formatting changes to match other versions of file. Unify formatting of https://github.com/gitlabhq/gitlabhq/blob/master/lib/support/nginx/gitlab, https://github.com/gitlabhq/gitlabhq/blob/master/lib/support/nginx/gitlab-ssl, & https://gitlab.com/gitlab-org/omnibus-gitlab/blob/master/files/gitlab-cookbooks/gitlab/templates/default/nginx-gitlab-http.conf.erb
* | Don't enable IPv4 *only* on nginx.Hugo Osvaldo Barrera2014-11-032-3/+6
|/ | | | | | | | | The current configuration sample files only enable IPv4 by default, making the server inaccesible for many remote hosts (and an increasing amount every day). Enable IPv4 and IPv6 by default. Older servers with no external IPv6 connectivity will not fail since they'll have a local-link IPv6 address to bind to anyway.
* Merge pull request #8054 from bbodenmiller/patch-4Dmitriy Zaporozhets2014-10-221-8/+6
|\ | | | | match latest config from https://cipherli.st/
| * match latest config from https://cipherli.st/Ben Bodenmiller2014-10-151-8/+6
| |
* | simplify DHE parameter generationBen Bodenmiller2014-10-161-2/+1
|/
* Add a comment on why we are using backward compatible ciphers.Marin Jankovski2014-10-101-3/+4
|
* Revert "update ssl_ciphers"Marin Jankovski2014-10-101-1/+1
| | | | This reverts commit c41e5f5018d059a9c57d2c19088e6c274cc60e10.
* Merge pull request #7664 from bbodenmiller/patch-2Sytse Sijbrandij2014-10-031-0/+2
|\ | | | | add HSTS Policy warning
| * add HSTS Policy warningBen Bodenmiller2014-09-011-0/+2
| | | | | | Add warning about HSTS header as it means user will need to provide secure connection access to site for next 24 months from page view. See https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security for more details.
* | fail_timeout=0 as recommended by UnicornBen Bodenmiller2014-09-122-2/+2
| | | | | | | | | | | | Set's fail_timeout=0 as recommended by http://unicorn.bogomips.org/Unicorn/Configurator.html#method-i-timeout when Unicorn is running behind nginx.
* | Merge pull request #7654 from bbodenmiller/patch-13Sytse Sijbrandij2014-09-081-1/+1
|\ \ | | | | | | update ssl_ciphers
| * | update ssl_ciphersBen Bodenmiller2014-09-071-1/+1
| |/ | | | | | | | | | | | | | | | | taken from https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html / https://cipherli.st/ backwards compatible ciphers not needed since gitlab does not support ie8
* | Merge pull request #7583 from bbodenmiller/httpsSytse Sijbrandij2014-09-081-12/+1
|\ \ | | | | | | [Documentation] simplify HTTPS setup details
| * | simplify HTTPS setup detailsBen Bodenmiller2014-09-071-12/+1
| |/ | | | | | | also adds comment about updating nginx files during upgrades
* | add optional nginx configs to make more secureBen Bodenmiller2014-09-071-0/+17
|/
* Merge pull request #7378 from jojosch/nginx-ssl-redirectDmitriy Zaporozhets2014-08-281-1/+1
|\ | | | | Use a ? after the $request_uri to perform a valid Redirect while cloning...
| * Use a ? after the $request_uri to perform a valid Redirect while cloning.johannes2014-08-231-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | fixes #6203 before: ❯ curl -I http://gitlab/namespace/repo.git/info/refs?service=git-upload-pack HTTP/1.1 301 Moved Permanently Server: nginx Date: Sat, 26 Jul 2014 18:20:27 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Location: https://gitlab/namespace/repo.git/info/refs?service=git-upload-pack?service=git-upload-pack after: ❯ curl -I http://gitlab/namespace/repo.git/info/refs\?service=git-upload-pack HTTP/1.1 301 Moved Permanently Server: nginx Date: Sat, 26 Jul 2014 18:23:54 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Location: https://gitlab/namespace/repo.git/info/refs?service=git-upload-pack [ci skip]
* | Merge pull request #7558 from bbodenmiller/patch-4Dmitriy Zaporozhets2014-08-231-1/+1
|\ \ | | | | | | change X-Frame-Options to SAMEORIGIN for nginx SSL config
| * | change X-Frame-Options to SAMEORIGINBen Bodenmiller2014-08-231-1/+1
| |/ | | | | needed to allow sidekiq to load on background jobs tab
* | unify nginx config filesBen Bodenmiller2014-08-232-46/+64
|/
* Simplify the description of single hash lines based on comments of Ben ↵Sytse Sijbrandij2014-08-221-2/+1
| | | | Bodenmiller.
* Simplify the ssl setup file.Sytse Sijbrandij2014-08-042-59/+30
|
* Move gitlab-ssl nginx config from gitlab-recipesAchilleas Pipinellis2014-06-051-0/+164
|
* Ensure sidekiq is displayed by setting X-Frame-Options.GitLab2014-06-031-0/+1
|
* Merge pull request #6986 from agjmills/masterDmitriy Zaporozhets2014-05-301-0/+1
|\ | | | | added SYSV chkconfig property so gitlab starts after MySQLd / nginx
| * added SYSV chkconfig property so gitlab starts after MySQLd / nginxAlexander Mills2014-05-161-0/+1
| |
* | Move from script to bin directory.Marin Jankovski2014-05-271-6/+6
|/
* Update warnings about relative url support.Marin Jankovski2014-05-131-1/+4
|
* Comment gzip: off be defaultDmitriy Zaporozhets2014-04-071-4/+4
|
* Disable compression to prevent BREACH attackDmitriy Zaporozhets2014-04-031-0/+3
| | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
* Merge branch 'master' of gitlab.com:gitlab-org/gitlab-ceDmitriy Zaporozhets2014-03-271-5/+5
|\
| * Merge branch 'bugfix/fix_unicorn-sidekiq_confusion_in_gitlab_init_script' ↵Jacob Vosmaer2014-03-261-5/+5
| |\ | | | | | | | | | | | | | | | | | | | | | into 'master' Fix Unicorn-Sidekiq Confusion In GitLab Init Script This merge request fixes issue #126 by updating a few sections of the included GitLab init file where Unicorn was referred to as Sidekiq and vice-versa.
View Lorry Controller Status