GitLab Community Edition

Uwaga na EE (GitLab Enterprise Edition)

Pobieramy CE Edition

• Instalacja:

curl https://packages.gitlab.com/install/repositories/gitlab/gitlab-ce/script.deb.sh | bash
apt-get install gitlab-ce
gitlab-ctl reconfigure

Dane użytkowników:

1. /var/opt/gitlab
2. /etc/gitlab/gitlab.rb:

# git_data_dirs({ "default" => { "path" => "/var/opt/gitlab/git-data", 'gitaly_address' => 'unix:/var/opt/gitlab/gitaly/gitaly.socket' } })

• https://docs.gitlab.com/ee/raketasks/backup_restore.html

LDAP

• Konfiguracja /etc/gitlab/gitlab.rb

gitlab_rails['ldap_enabled'] = true
gitlab_rails['ldap_servers'] = YAML.load -'EOS'
   main: # 'main' is the GitLab 'provider ID' of this LDAP server
     label: 'LDAP1'
     host: 'ldap1.autosan.pl'
     port: 389
     uid: 'uid'
     method: 'plain' # "tls" or "ssl" or "plain"
     bind_dn: 'cn=gitlab,dc=autosan,dc=pl'
     password: 'GitLAB.2017.'
     active_directory: false
     allow_username_or_email_login: false
     block_auto_created_users: false
     base: 'ou=it,ou=users,dc=autosan,dc=pl'
     user_filter: '(&(objectClass=posixAccount)(accountStatus=active))'
     attributes:
       username: ['uid']
       email:    ['mail']
       name:       'cn'
       first_name: 'givenName'
       last_name:  'sn'
     ## EE only
     group_base: ''
     admin_group: ''
     sync_ssh_keys: false
#   secondary: # 'secondary' is the GitLab 'provider ID' of second LDAP server
#     label: 'LDAP2'
#     host: 'ldap2.autosan.pl'
#     port: 389
#     uid: 'uid'
#     method: 'plain' # "tls" or "ssl" or "plain"
#     bind_dn: 'cn=gitlab,dc=autosan,dc=pl'
#     password: 'GitLAB.2017.'
#     active_directory: false
#     allow_username_or_email_login: false
#     block_auto_created_users: false
#     base: 'ou=it,ou=users,dc=autosan,dc=pl'
#     user_filter: '(&(objectClass=posixAccount)(accountStatus=active))'
#     attributes:
#       username: ['uid']
#       email:    ['mail']
#       name:       'cn'
#       first_name: 'givenName'
#       last_name:  'sn'
#     ## EE only
#     group_base: ''
#     admin_group: ''
#     sync_ssh_keys: false
EOS

Wpisujemy tylko jeden LDAP bo 2 jest tylko dla EE.
zgodmie z opisem https://docs.gitlab.com/omnibus/settings/ldap.html