|
|
|
## Sharing GitLab https setup
|
|
|
|
|
|
|
|
Sharing GitLab is running in a container.
|
|
|
|
|
|
|
|
In order to run on native ssl, the following changes where applied to `/etc/gitlab/gitlab.rb` (see [Gitlab ssl](https://docs.gitlab.com/omnibus/settings/ssl.html)):
|
|
|
|
|
|
|
|
```external_url "https://sharing-codeability.uibk.ac.at/" # Must use https protocol```
|
|
|
|
|
|
|
|
GitLab now runs with a self signed certificate behind Port 10083 mapped to 443.
|
|
|
|
|
|
|
|
Additionally the apache configuration in `/etc/apache2/sites-available/default-ssl.conf` was changed
|
|
|
|
|
|
|
|
```
|
|
|
|
SSLProxyVerify none
|
|
|
|
SSLProxyCheckPeerCN off
|
|
|
|
SSLProxyCheckPeerName off
|
|
|
|
SSLProxyCheckPeerExpire off
|
|
|
|
|
|
|
|
|
|
|
|
ProxyPass / https://xxxx:443/
|
|
|
|
ProxyPassReverse / https://xxxx:443/
|
|
|
|
|
|
|
|
```
|
|
|
|
Where xxxx stands for the ip-number of the docker image.
|
|
|
|
|
|
|
|
TODO: make Apache configuration resilient to ip number changes
|
|
|
|
|
|
|
|
|
|
|
|
|