summaryrefslogtreecommitdiff
path: root/config/initializers/session_store.rb
blob: c3bee1c7ceceb6cd5f150b4f5f7f58d99381f086 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
# Be sure to restart your server when you modify this file.

require 'gitlab/current_settings'
include Gitlab::CurrentSettings
Settings.gitlab['session_expire_delay'] = current_application_settings.session_expire_delay

Gitlab::Application.config.session_store(
  :redis_store, # Using the cookie_store would enable session replay attacks.
  servers: Gitlab::Application.config.cache_store[1].merge(namespace: 'session:gitlab'), # re-use the Redis config from the Rails cache store
  key: '_gitlab_session',
  secure: Gitlab.config.gitlab.https,
  httponly: true,
  expire_after: Settings.gitlab['session_expire_delay'] * 60,
  path: (Gitlab::Application.config.relative_url_root.nil?) ? '/' : Gitlab::Application.config.relative_url_root
)