summaryrefslogtreecommitdiff
path: root/app/views/admin/application_settings/_protected_paths.html.haml
blob: d273c81f51d394d76a6ccc18f2a67a3163b5b12d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
= form_for @application_setting, url: network_admin_application_settings_path(anchor: 'js-protected-paths-settings'), html: { class: 'fieldset-form' } do |f|
  = form_errors(@application_setting)

  %fieldset
    .form-group
      .form-check
        = f.check_box :throttle_protected_paths_enabled, class: 'form-check-input'
        = f.label :throttle_protected_paths_enabled, class: 'form-check-label' do
          = _('Enable rate limiting for POST requests to the specified paths')
        %span.form-text.text-muted
          = _('Helps reduce request volume for protected paths.')
    .form-group
      = f.label :throttle_protected_paths_requests_per_period, 'Maximum requests per period per user', class: 'label-bold'
      = f.number_field :throttle_protected_paths_requests_per_period, class: 'form-control gl-form-input'
    .form-group
      = f.label :throttle_protected_paths_period_in_seconds, 'Rate limit period (in seconds)', class: 'label-bold'
      = f.number_field :throttle_protected_paths_period_in_seconds, class: 'form-control gl-form-input'
    .form-group
      = f.label :protected_paths, class: 'label-bold' do
        = _('Paths to protect with rate limiting')
      = f.text_area :protected_paths_raw, placeholder: '/users/sign_in,/users/password', class: 'form-control gl-form-input', rows: 10
      %span.form-text.text-muted
        - relative_url_link = 'https://docs.gitlab.com/omnibus/settings/configuration.html#configuring-a-relative-url-for-gitlab'
        - relative_url_link_start = '<a href="%{url}" target="_blank" rel="noopener noreferrer">'.html_safe % { url: relative_url_link }
        = _('All paths are relative to the GitLab URL. Do not include %{relative_url_link_start}relative URLs%{relative_url_link_end}.').html_safe % { relative_url_link_start: relative_url_link_start, relative_url_link_end: '</a>'.html_safe }

  = f.submit _('Save changes'), class: 'gl-button btn btn-confirm'