· 8 years ago · Jan 27, 2018, 07:52 PM
1# nginx['worker_connections'] = 10240
2# nginx['log_format'] = '$remote_addr - $remote_u
3ser [$time_local] "$request" $status $body_bytes_
4sent "$http_referer" "$http_user_agent"'
5# nginx['sendfile'] = 'on'
6# nginx['tcp_nopush'] = 'on'
7# nginx['tcp_nodelay'] = 'on'
8# nginx['gzip'] = "on"
9# nginx['gzip_http_version'] = "1.0"
10# nginx['gzip_comp_level'] = "2"
11# nginx['gzip_proxied'] = "any"
12# nginx['gzip_types'] = [ "text/plain", "text/css
13", "application/x-javascript", "text/xml", "appli
14cation/xml", "application/xml+rss", "text/javascr
15ipt", "application/json" ]
16# nginx['keepalive_timeout'] = 65
17# nginx['cache_max_size'] = '5000m'
18# nginx['server_names_hash_bucket_size'] = 64
19
20### Nginx status
21# nginx['status'] = {
22# "enable" => true,
23# "listen_addresses" => ["127.0.0.1"],
24# "fqdn" => "dev.example.com",
25# "port" => 9999,
26# "options" => {
27# "stub_status" => "on", # Turn on stats
28# "server_tokens" => "off", # Don't show the v
29ersion of NGINX
30# "access_log" => "off", # Disable logs for st
31ats
32# "allow" => "127.0.0.1", # Only allow access
33from localhost
34# "deny" => "all" # Deny access to anyone else
35# }
36# }
37
38#################################################
39###############################
40## GitLab Logging
41##! Docs: https://docs.gitlab.com/omnibus/setting
42s/logs.html
43#################################################
44###############################
45
46# logging['svlogd_size'] = 200 * 1024 * 1024 # ro
47tate after 200 MB of log data
48# logging['svlogd_num'] = 30 # keep 30 rotated lo
49g files
50# logging['svlogd_timeout'] = 24 * 60 * 60 # rota
51te after 24 hours
52# logging['svlogd_filter'] = "gzip" # compress lo
53gs with gzip
54# logging['svlogd_udp'] = nil # transmit log mess
55ages via UDP
56# logging['svlogd_prefix'] = nil # custom prefix
57for log messages
58# logging['logrotate_frequency'] = "daily" # rota
59te logs daily
60# logging['logrotate_size'] = nil # do not rotate
61 by size by default
62# logging['logrotate_rotate'] = 30 # keep 30 rota
63ted logs
64# logging['logrotate_compress'] = "compress" # se
65e 'man logrotate'
66# logging['logrotate_method'] = "copytruncate" #
67see 'man logrotate'
68# logging['logrotate_postrotate'] = nil # no post
69rotate command by default
70# logging['logrotate_dateformat'] = nil # use dat
71e extensions for rotated files rather than number
72s e.g. a value of "-%Y-%m-%d" would give rotated
73files like production.log-2016-03-09.gz
74
75#################################################
76###############################
77## Logrotate
78##! Docs: https://docs.gitlab.com/omnibus/setting
79s/logs.html#logrotate
80##! You can disable built in logrotate feature.
81#################################################
82###############################
83# logrotate['enable'] = true
84
85#################################################
86###############################
87## Users and groups accounts
88##! Disable management of users and groups accoun
89ts.
90##! **Set only if creating accounts manually**
91##! Docs: https://docs.gitlab.com/omnibus/setting
92s/configuration.html#disable-user-and-group-accou
93nt-management
94#################################################
95###############################
96
97# manage_accounts['enable'] = false
98
99#################################################
100###############################
101## Storage directories
102##! Disable managing storage directories
103##! Docs: https://docs.gitlab.com/omnibus/setting
104s/configuration.html#disable-storage-directories-
105management
106#################################################
107###############################
108
109##! **Set only if the select directories are crea
110ted manually**
111# manage_storage_directories['enable'] = false
112# manage_storage_directories['manage_etc'] = fals
113e
114
115#################################################
116###############################
117## Runtime directory
118##! Docs: https://docs.gitlab.com//omnibus/settin
119gs/configuration.html#runtime-directory
120#################################################
121###############################
122
123# runtime_dir '/run'
124
125#################################################
126###############################
127## Git
128##! Advanced setting for configuring git system s
129ettings for omnibus-gitlab
130##! internal git
131#################################################
132###############################
133
134##! For multiple options under one header use arr
135ay of comma separated values,
136##! eg.:
137##! { "receive" => ["fsckObjects = true"], "alias
138" => ["st = status", "co = checkout"] }
139
140# omnibus_gitconfig['system'] = {
141# "pack" => ["threads = 1"],
142# "receive" => ["fsckObjects = true"],
143# "repack" => ["writeBitmaps = true"],
144# "transfer" => ["hideRefs=^refs/tmp/", "hideRef
145s=^refs/keep-around/"],
146# }
147
148#################################################
149###############################
150## GitLab Pages
151##! Docs: https://docs.gitlab.com/ce/pages/admini
152stration.html
153#################################################
154###############################
155
156##! Define to enable GitLab Pages
157# pages_external_url "http://pages.example.com/"
158# gitlab_pages['enable'] = false
159
160##! Configure to expose GitLab Pages on external
161IP address, serving the HTTP
162# gitlab_pages['external_http'] = []
163
164##! Configure to expose GitLab Pages on external
165IP address, serving the HTTPS
166# gitlab_pages['external_https'] = []
167
168# gitlab_pages['listen_proxy'] = "localhost:8090"
169# gitlab_pages['redirect_http'] = true
170# gitlab_pages['use_http2'] = true
171# gitlab_pages['dir'] = "/var/opt/gitlab/gitlab-p
172ages"
173# gitlab_pages['log_directory'] = "/var/log/gitla
174b/gitlab-pages"
175
176##! Prometheus metrics for Pages docs: https://gi
177tlab.com/gitlab-org/gitlab-pages/#enable-promethe
178us-metrics
179# gitlab_pages['metrics_address'] = ":9235"
180
181#################################################
182###############################
183## GitLab Pages NGINX
184#################################################
185###############################
186
187# All the settings defined in the "GitLab Nginx"
188section are also available in this "GitLab Pages
189NGINX" section
190# You just have to change the key "nginx['some_se
191ttings']" with "pages_nginx['some_settings']"
192
193# Below you can find settings that are exclusive
194to "GitLab Pages NGINX"
195# pages_nginx['enable'] = false
196
197# gitlab_rails['pages_path'] = "/mnt/storage/page
198s"
199
200#################################################
201###############################
202## GitLab CI
203##! Docs: https://docs.gitlab.com/ce/ci/quick_sta
204rt/README.html
205#################################################
206###############################
207
208# gitlab_ci['gitlab_ci_all_broken_builds'] = true
209# gitlab_ci['gitlab_ci_add_pusher'] = true
210# gitlab_ci['builds_directory'] = '/var/opt/gitla
211b/gitlab-ci/builds'
212
213#################################################
214###############################
215## GitLab Mattermost
216##! Docs: https://docs.gitlab.com/omnibus/gitlab-
217mattermost
218#################################################
219###############################
220
221# mattermost_external_url 'http://mattermost.exam
222ple.com'
223
224# mattermost['enable'] = false
225# mattermost['username'] = 'mattermost'
226# mattermost['group'] = 'mattermost'
227# mattermost['uid'] = nil
228# mattermost['gid'] = nil
229# mattermost['home'] = '/var/opt/gitlab/mattermos
230t'
231# mattermost['database_name'] = 'mattermost_produ
232ction'
233
234# mattermost['service_use_ssl'] = false
235# mattermost['service_address'] = "127.0.0.1"
236# mattermost['service_port'] = "8065"
237# mattermost['service_site_url'] = nil
238# mattermost['service_maximum_login_attempts'] =
23910
240# mattermost['service_google_developer_key'] = ni
241l
242# mattermost['service_enable_incoming_webhooks']
243= true
244# mattermost['service_enable_post_username_overri
245de'] = true
246# mattermost['service_enable_post_icon_override']
247 = true
248# mattermost['service_enable_testing'] = false
249# mattermost['service_enable_security_fix_alert']
250 = true
251# mattermost['service_enable_insecure_outgoing_co
252nnections'] = false
253# mattermost['service_allow_cors_from'] = ""
254# mattermost['service_enable_outgoing_webhooks']
255= true
256# mattermost['service_enable_commands'] = true
257# mattermost['service_enable_custom_emoji'] = fal
258se
259# mattermost['service_enable_only_admin_integrati
260ons'] = true
261# mattermost['service_enable_oauth_service_provid
262er'] = false
263# mattermost['service_enable_developer'] = false
264# mattermost['service_session_length_web_in_days'
265] = 30
266# mattermost['service_session_length_mobile_in_da
267ys'] = 30
268# mattermost['service_session_length_sso_in_days'
269] = 30
270# mattermost['service_session_cache_in_minutes']
271= 10
272# mattermost['service_connection_security'] = nil
273# mattermost['service_tls_cert_file'] = nil
274# mattermost['service_tls_key_file'] = nil
275# mattermost['service_use_lets_encrypt'] = false
276# mattermost['service_lets_encrypt_cert_cache_fil
277e'] = "./config/letsencrypt.cache"
278# mattermost['service_forward_80_to_443'] = false
279# mattermost['service_read_timeout'] = 300
280# mattermost['service_write_timeout'] = 300
281# mattermost['service_time_between_user_typing_up
282dates_milliseconds'] = 5000
283# mattermost['service_enable_link_previews'] = fa
284lse
285# mattermost['service_enable_user_typing_messages
286'] = true
287# mattermost['service_enable_post_search'] = true
288# mattermost['service_enable_user_statuses'] = tr
289ue
290
291# mattermost['team_site_name'] = "GitLab Mattermo
292st"
293# mattermost['team_max_users_per_team'] = 150
294# mattermost['team_enable_team_creation'] = true
295# mattermost['team_enable_user_creation'] = true
296# mattermost['team_enable_open_server'] = false
297# mattermost['team_allow_public_link'] = true
298# mattermost['team_allow_valet_default'] = false
299# mattermost['team_restrict_creation_to_domains']
300 = "gmail.com"
301# mattermost['team_restrict_team_names'] = true
302# mattermost['team_restrict_direct_message'] = "a
303ny"
304# mattermost['team_max_channels_per_team'] = 2000
305# mattermost['team_user_status_away_timeout'] = 3
30600
307
308# mattermost['sql_driver_name'] = 'mysql'
309# mattermost['sql_data_source'] = "mmuser:mostest
310@tcp(dockerhost:3306)/mattermost_test?charset=utf
3118mb4,utf8"
312# mattermost['sql_data_source_replicas'] = ["mmus
313er:mostest@tcp(dockerhost:3306)/mattermost_test?c
314harset=utf8mb4,utf8"]
315# mattermost['sql_max_idle_conns'] = 10
316# mattermost['sql_max_open_conns'] = 10
317# mattermost['sql_trace'] = false
318# mattermost['sql_data_source_search_replicas'] =
319 []
320
321# mattermost['log_file_directory'] = '/var/log/gi
322tlab/mattermost'
323# mattermost['log_console_enable'] = true
324# mattermost['log_console_level'] = 'INFO'
325# mattermost['log_enable_file'] = false
326# mattermost['log_file_level'] = 'INFO'
327# mattermost['log_file_format'] = nil
328# mattermost['log_enable_diagnostics'] = true
329
330# mattermost['gitlab_enable'] = false
331# mattermost['gitlab_id'] = "12345656"
332# mattermost['gitlab_secret'] = "123456789"
333# mattermost['gitlab_scope'] = ""
334# mattermost['gitlab_auth_endpoint'] = "http://gi
335tlab.example.com/oauth/authorize"
336# mattermost['gitlab_token_endpoint'] = "http://g
337itlab.example.com/oauth/token"
338# mattermost['gitlab_user_api_endpoint'] = "http:
339//gitlab.example.com/api/v3/user"
340
341# mattermost['aws'] = {'S3AccessKeyId' => '123',
342'S3SecretAccessKey' => '123', 'S3Bucket' => 'aa',
343 'S3Region' => 'bb'}
344
345# mattermost['email_enable_sign_up_with_email'] =
346 true
347# mattermost['email_enable_sign_in_with_email'] =
348 true
349# mattermost['email_enable_sign_in_with_username'
350] = false
351# mattermost['email_send_email_notifications'] =
352false
353# mattermost['email_require_email_verification']
354= false
355# mattermost['email_smtp_username'] = nil
356# mattermost['email_smtp_password'] = nil
357# mattermost['email_smtp_server'] = nil
358# mattermost['email_smtp_port'] = nil
359# mattermost['email_connection_security'] = nil
360# mattermost['email_feedback_name'] = nil
361# mattermost['email_feedback_email'] = nil
362# mattermost['email_feedback_organization'] = nil
363# mattermost['email_send_push_notifications'] = t
364rue
365# mattermost['email_push_notification_server'] =
366""
367# mattermost['email_push_notification_contents']
368= "generic"
369# mattermost['email_enable_batching'] = false
370# mattermost['email_batching_buffer_size'] = 256
371# mattermost['email_batching_interval'] = 30
372# mattermost['email_skip_server_certificate_verif
373ication'] = false
374
375# mattermost['file_max_file_size'] = 52428800
376# mattermost['file_driver_name'] = "local"
377# mattermost['file_directory'] = "/var/opt/gitlab
378/mattermost/data"
379# mattermost['file_enable_public_link'] = true
380# mattermost['file_thumbnail_width'] = 120
381# mattermost['file_thumbnail_height'] = 100
382# mattermost['file_preview_width'] = 1024
383# mattermost['file_preview_height'] = 0
384# mattermost['file_profile_width'] = 128
385# mattermost['file_profile_height'] = 128
386# mattermost['file_initial_font'] = 'luximbi.ttf'
387# mattermost['file_amazon_s3_access_key_id'] = ni
388l
389# mattermost['file_amazon_s3_bucket'] = nil
390# mattermost['file_amazon_s3_secret_access_key']
391= nil
392# mattermost['file_amazon_s3_region'] = nil
393# mattermost["file_amazon_s3_endpoint"] = nil
394# mattermost["file_amazon_s3_bucket_endpoint"] =
395nil
396# mattermost["file_amazon_s3_location_constraint"
397] = false
398# mattermost["file_amazon_s3_lowercase_bucket"] =
399 false
400# mattermost["file_amazon_s3_ssl"] = true
401# mattermost['file_enable_file_attachments'] = tr
402ue
403
404# mattermost['ratelimit_enable_rate_limiter'] = f
405alse
406# mattermost['ratelimit_per_sec'] = 10
407# mattermost['ratelimit_memory_store_size'] = 100
40800
409# mattermost['ratelimit_vary_by_remote_addr'] = t
410rue
411# mattermost['ratelimit_vary_by_header'] = nil
412# mattermost['ratelimit_max_burst'] = 100
413
414# mattermost['support_terms_of_service_link'] = "
415/static/help/terms.html"
416# mattermost['support_privacy_policy_link'] = "/s
417tatic/help/privacy.html"
418# mattermost['support_about_link'] = "/static/hel
419p/about.html"
420# mattermost['support_report_a_problem_link'] =
421"/static/help/report_problem.html"
422# mattermost['support_email'] = "support@example
423.com"
424
425# mattermost['privacy_show_email_address'] = true
426# mattermost['privacy_show_full_name'] = true
427
428# mattermost['localization_server_locale'] = "en"
429# mattermost['localization_client_locale'] = "en"
430# mattermost['localization_available_locales'] =
431"en,es,fr,ja,pt-BR"
432
433# mattermost['webrtc_enable'] = false
434# mattermost['webrtc_gateway_websocket_url'] = ni
435l
436# mattermost['webrtc_gateway_admin_url'] = nil
437# mattermost['webrtc_gateway_admin_secret'] = nil
438# mattermost['webrtc_gateway_stun_uri'] = nil
439# mattermost['webrtc_gateway_turn_uri'] = nil
440# mattermost['webrtc_gateway_turn_username'] = ni
441l
442# mattermost['webrtc_gateway_turn_shared_key'] =
443nil
444
445#################################################
446###############################
447## Mattermost NGINX
448#################################################
449###############################
450
451# All the settings defined in the "GitLab NGINX"
452section are also available in this "Mattermost NG
453INX" section
454# You just have to change the key "nginx['some_se
455ttings']" with "mattermost_nginx['some_settings']
456"
457
458# Below you can find settings that are exclusive
459to "Mattermost NGINX"
460# mattermost_nginx['enable'] = false
461
462# mattermost_nginx['custom_gitlab_mattermost_serv
463er_config'] = "location ^~ /foo-namespace/bar-pro
464ject/raw/ {\n deny all;\n}\n"
465# mattermost_nginx['proxy_set_headers'] = {
466# "Host" => "$http_host",
467# "X-Real-IP" => "$remote_addr",
468# "X-Forwarded-For" => "$proxy_add_x_forwarded_
469for",
470# "X-Frame-Options" => "SAMEORIGIN",
471# "X-Forwarded-Proto" => "https",
472# "X-Forwarded-Ssl" => "on",
473# "Upgrade" => "$http_upgrade",
474# "Connection" => "$connection_upgrade"
475# }
476
477
478#################################################
479###############################
480## Registry NGINX
481#################################################
482###############################
483
484# All the settings defined in the "GitLab NGINX"
485section are also available in this "Registry NGIN
486X" section
487# You just have to change the key "nginx['some_se
488ttings']" with "registry_nginx['some_settings']"
489
490# Below you can find settings that are exclusive
491to "Registry NGINX"
492# registry_nginx['enable'] = false
493
494# registry_nginx['proxy_set_headers'] = {
495# "Host" => "$http_host",
496# "X-Real-IP" => "$remote_addr",
497# "X-Forwarded-For" => "$proxy_add_x_forwarded_f
498or",
499# "X-Forwarded-Proto" => "https",
500# "X-Forwarded-Ssl" => "on"
501# }
502
503#################################################
504###############################
505## Prometheus
506##! Docs: https://docs.gitlab.com/ce/administrati
507on/monitoring/prometheus/
508#################################################
509###############################
510
511# prometheus['enable'] = true
512# prometheus['monitor_kubernetes'] = true
513# prometheus['username'] = 'gitlab-prometheus'
514# prometheus['uid'] = nil
515# prometheus['gid'] = nil
516# prometheus['shell'] = '/bin/sh'
517# prometheus['home'] = '/var/opt/gitlab/prometheu
518s'
519# prometheus['log_directory'] = '/var/log/gitlab/
520prometheus'
521# prometheus['scrape_interval'] = 15
522# prometheus['scrape_timeout'] = 15
523# prometheus['chunk_encoding_version'] = 2
524#
525### Custom scrape configs
526#
527# Prometheus can scrape additional jobs via scrap
528e_configs. The default automatically
529# includes all of the exporters supported by the
530omnibus config.
531#
532# See: https://prometheus.io/docs/operating/confi
533guration/#<scrape_config>
534#
535# Example:
536#
537# prometheus['scrape_configs'] = [
538# {
539# 'job_name': 'example',
540# 'static_configs' => [
541# 'targets' => ['hostname:port'],
542# ],
543# },
544# ]
545#
546### Prometheus Memory Management
547#
548# Prometheus needs to be configured for how much
549memory is used.
550# * This sets the target heap size.
551# * This value accounts for approximately 2/3 of
552the memory used by the server.
553# * The recommended memory is 4kb per unique metr
554ics time-series.
555# See: https://prometheus.io/docs/operating/stora
556ge/#memory-usage
557#
558# prometheus['target_heap_size'] = (
559# # Use 25mb + 2% of total memory for Prometheu
560s memory.
561# 26_214_400 + (node['memory']['total'].to_i *
5621024 * 0.02 )
563# ).to_i
564#
565# prometheus['flags'] = {
566# 'storage.local.path' => "#{node['gitlab']['pr
567ometheus']['home']}/data",
568# 'storage.local.chunk-encoding-version' => use
569r_config['chunk-encoding-version'],
570# 'storage.local.target-heap-size' => node['git
571lab']['prometheus']['target-heap-size'],
572# 'config.file' => "#{node['gitlab']['prometheu
573s']['home']}/prometheus.yml"
574# }
575
576##! Advanced settings. Should be changed only if
577absolutely needed.
578# prometheus['listen_address'] = 'localhost:9090'
579
580#################################################
581###############################
582## Prometheus Node Exporter
583##! Docs: https://docs.gitlab.com/ce/administrati
584on/monitoring/prometheus/node_exporter.html
585#################################################
586###############################
587
588# node_exporter['enable'] = true
589# node_exporter['home'] = '/var/opt/gitlab/node-e
590xporter'
591# node_exporter['log_directory'] = '/var/log/gitl
592ab/node-exporter'
593# node_exporter['flags'] = {
594# 'collector.textfile.directory' => "#{node['gi
595tlab']['node-exporter']['home']}/textfile_collect
596or"
597# }
598
599##! Advanced settings. Should be changed only if
600absolutely needed.
601# node_exporter['listen_address'] = 'localhost:91
60200'
603
604#################################################
605###############################
606## Prometheus Redis exporter
607##! Docs: https://docs.gitlab.com/ce/administrati
608on/monitoring/prometheus/redis_exporter.html
609#################################################
610###############################
611
612# redis_exporter['enable'] = true
613# redis_exporter['log_directory'] = '/var/log/git
614lab/redis-exporter'
615# redis_exporter['flags'] = {
616# 'redis.addr' => "unix://#{node['gitlab']['git
617lab-rails']['redis_socket']}",
618# }
619
620##! Advanced settings. Should be changed only if
621absolutely needed.
622# redis_exporter['listen_address'] = 'localhost:9
623121'
624
625#################################################
626###############################
627## Prometheus Postgres exporter
628##! Docs: https://docs.gitlab.com/ce/administrati
629on/monitoring/prometheus/postgres_exporter.html
630#################################################
631###############################
632
633# postgres_exporter['enable'] = true
634# postgres_exporter['home'] = '/var/opt/gitlab/po
635stgres-exporter'
636# postgres_exporter['log_directory'] = '/var/log/
637gitlab/postgres-exporter'
638# postgres_exporter['flags'] = {}
639# postgres_exporter['listen_address'] = 'localhos
640t:9187'
641
642#################################################
643###############################
644## Prometheus Gitlab monitor
645##! Docs: https://docs.gitlab.com/ce/administrati
646on/monitoring/prometheus/gitlab_monitor_exporter.
647html
648#################################################
649###############################
650
651
652# gitlab_monitor['enable'] = true
653# gitlab_monitor['log_directory'] = "/var/log/git
654lab/gitlab-monitor"
655# gitlab_monitor['home'] = "/var/opt/gitlab/gitla
656b-monitor"
657
658##! Advanced settings. Should be changed only if
659absolutely needed.
660# gitlab_monitor['listen_address'] = 'localhost'
661# gitlab_monitor['listen_port'] = '9168'
662
663# To completely disable prometheus, and all of it
664's exporters, set to false
665# prometheus_monitoring['enable'] = true
666
667#################################################
668###############################
669## Gitaly
670##! Docs:
671#################################################
672###############################
673
674
675# gitaly['enable'] = false
676# gitaly['dir'] = "/var/opt/gitlab/gitaly"
677# gitaly['log_directory'] = "/var/log/gitlab/gita
678ly"
679# gitaly['bin_path'] = "/opt/gitlab/embedded/bin/
680gitaly"
681# gitaly['env_directory'] = "/opt/gitlab/etc/gita
682ly"
683# gitaly['env'] = {
684# 'PATH' => "/opt/gitlab/bin:/opt/gitlab/embedde
685d/bin:/bin:/usr/bin",
686# 'HOME' => '/var/opt/gitlab'
687# }
688# gitaly['socket_path'] = "/var/opt/gitlab/gitaly
689/gitaly.socket"
690# gitaly['listen_addr'] = "localhost:8075"
691# gitaly['prometheus_listen_addr'] = "localhost:9
692175"
693# gitaly['logging_format'] = "json"
694# gitaly['sentry_dsn'] = "https://<key>:<secret>@
695sentry.io/<project>"
696# gitaly['grpc_latency_buckets'] = "[0.001, 0.005
697, 0.025, 0.1, 0.5, 1.0, 10.0, 30.0, 60.0, 300.0,
6981500.0]"
699
700
701#################################################
702###############################
703#################################################
704###############################
705## Configuration Settings for Gi
706tLab EE only ##
707#################################################
708###############################
709#################################################
710###############################
711
712
713#################################################
714###############################
715## Auxiliary cron jobs applicable to GitLab EE on
716ly
717#################################################
718###############################
719#
720# gitlab_rails['geo_bulk_notify_worker_cron'] = "
721*/10 * * * * *"
722# gitlab_rails['geo_file_download_dispatch_worker
723_cron'] = "*/10 * * * *"
724# gitlab_rails['geo_repository_sync_worker_cron']
725 = "*/5 * * * *"
726# gitlab_rails['ldap_sync_worker_cron'] = "30 1 *
727 * *"
728# gitlab_rails['ldap_group_sync_worker_cron'] = "
7290 * * * *"
730# gitlab_rails['historical_data_worker_cron'] = "
7310 12 * * *"
732
733#################################################
734###############################
735## Kerberos (EE Only)
736##! Docs: https://docs.gitlab.com/ee/integration/
737kerberos.html#http-git-access
738#################################################
739###############################
740
741# gitlab_rails['kerberos_enabled'] = true
742# gitlab_rails['kerberos_keytab'] = /etc/http.key
743tab
744# gitlab_rails['kerberos_service_principal_name']
745 = HTTP/gitlab.example.com@EXAMPLE.COM
746# gitlab_rails['kerberos_use_dedicated_port'] = t
747rue
748# gitlab_rails['kerberos_port'] = 8443
749# gitlab_rails['kerberos_https'] = true
750
751#################################################
752###############################
753## GitLab Sentinel (EE Only)
754##! Docs: http://docs.gitlab.com/ce/administratio
755n/high_availability/redis.html#high-availability-
756with-sentinel
757#################################################
758###############################
759
760##! **Make sure you configured all redis['master_
761*'] keys above before
762##! continuing.**
763
764##! To enable Sentinel and disable all other serv
765ices in this machine,
766##! uncomment the line below (if you've enabled R
767edis role, it will keep it).
768##! Docs: https://docs.gitlab.com/ce/administrati
769on/high_availability/redis.html
770# redis_sentinel_role['enable'] = true
771
772# sentinel['enable'] = true
773
774##! Bind to all interfaces, uncomment to specify
775an IP and bind to a single one
776# sentinel['bind'] = '0.0.0.0'
777
778##! Uncomment to change default port
779# sentinel['port'] = 26379
780
781##! Quorum must reflect the amount of voting sent
782inels it take to start a
783##! failover.
784##! **Value must NOT be greater then the amount o
785f sentinels.**
786##! The quorum can be used to tune Sentinel in tw
787o ways:
788##! 1. If a the quorum is set to a value smaller
789than the majority of Sentinels
790##! we deploy, we are basically making Sentine
791l more sensible to master
792##! failures, triggering a failover as soon as
793 even just a minority of
794##! Sentinels is no longer able to talk with t
795he master.
796##! 2. If a quorum is set to a value greater than
797 the majority of Sentinels, we
798##! are making Sentinel able to failover only
799when there are a very large
800##! number (larger than majority) of well conn
801ected Sentinels which agree
802##! about the master being down.
803# sentinel['quorum'] = 1
804
805### Consider unresponsive server down after x amo
806unt of ms.
807# sentinel['down_after_milliseconds'] = 10000
808
809### Specifies the failover timeout in millisecond
810s.
811##! It is used in many ways:
812##!
813##! - The time needed to re-start a failover afte
814r a previous failover was
815##! already tried against the same master by a
816given Sentinel, is two
817##! times the failover timeout.
818##!
819##! - The time needed for a slave replicating to
820a wrong master according
821##! to a Sentinel current configuration, to be
822forced to replicate
823##! with the right master, is exactly the failo
824ver timeout (counting since
825##! the moment a Sentinel detected the misconfi
826guration).
827##!
828##! - The time needed to cancel a failover that i
829s already in progress but
830##! did not produced any configuration change (
831SLAVEOF NO ONE yet not
832##! acknowledged by the promoted slave).
833##!
834##! - The maximum time a failover in progress wai
835ts for all the slaves to be
836##! reconfigured as slaves of the new master. H
837owever even after this time
838##! the slaves will be reconfigured by the Sent
839inels anyway, but not with
840##! the exact parallel-syncs progression as spe
841cified.
842# sentinel['failover_timeout'] = 60000
843
844#################################################
845###############################
846## Logging (Additional, EE Only features)
847##! Docs: http://docs.gitlab.com/omnibus/settings
848/logs.html#udp-log-shipping-gitlab-enterprise-edi
849tion-only-
850#################################################
851###############################
852
853##! remote host to ship log messages to via UDP
854# logging['udp_log_shipping_host'] = nil
855
856##! remote port to ship log messages to via UDP
857# logging['udp_log_shipping_port'] = 514
858
859#################################################
860###############################
861## GitLab Sidekiq Cluster (EE only)
862#################################################
863###############################
864
865##! GitLab Enterprise Edition allows one to start
866 an extra set of Sidekiq processes
867##! besides the default one. These processes can
868be used to consume a dedicated set
869##! of queues. This can be used to ensure certain
870 queues always have dedicated
871##! workers, no matter the amount of jobs that ne
872ed to be processed.
873
874# sidekiq_cluster['enable'] = false
875# sidekiq_cluster['ha'] = false
876# sidekiq_cluster['log_directory'] = "/var/log/gi
877tlab/sidekiq-cluster"
878# sidekiq_cluster['interval'] = 5 # The number of
879 seconds to wait between worker checks
880
881##! Each entry in the queue_groups array denotes
882a group of queues that have to be processed by a
883##! Sidekiq process. Multiple queues can be proce
884ssed by the same process by
885##! separating them with a comma within the group
886 entry
887
888# sidekiq_cluster['queue_groups'] = [
889# "process_commit,post_receive",
890# "gitlab_shell"
891# ]
892#
893
894#################################################
895###############################
896# Additional Database Settings (EE only)
897#################################################
898###############################
899# gitlab_rails['db_load_balancing'] = { 'hosts' =
900> ['secondary1.example.com'] }
901
902#################################################
903###############################
904## GitLab Geo
905##! Docs: https://docs.gitlab.com/ee/gitlab-geo
906#################################################
907###############################
908# geo_primary_role['enable'] = false
909# geo_secondary_role['enable'] = false
910
911#################################################
912###############################
913## GitLab Geo Secondary (EE only)
914#################################################
915###############################
916# geo_secondary['auto_migrate'] = true
917# geo_secondary['db_adapter'] = "postgresql"
918# geo_secondary['db_encoding'] = "unicode"
919# geo_secondary['db_collation'] = nil
920# geo_secondary['db_database'] = "gitlabhq_geo_pr
921oduction"
922# geo_secondary['db_pool'] = 10
923# geo_secondary['db_username'] = "gitlab_geo"
924# geo_secondary['db_password'] = nil
925# geo_secondary['db_host'] = "/var/opt/gitlab/geo
926-postgresql"
927# geo_secondary['db_port'] = 5431
928# geo_secondary['db_socket'] = nil
929# geo_secondary['db_sslmode'] = nil
930# geo_secondary['db_sslrootcert'] = nil
931# geo_secondary['db_sslca'] = nil
932
933#################################################
934###############################
935## GitLab Geo Secondary Tracking Database (EE onl
936y)
937#################################################
938###############################
939
940# geo_postgresql['enable'] = false
941# geo_postgresql['ha'] = false
942# geo_postgresql['dir'] = '/var/opt/gitlab/geo-po
943stgresql'
944# geo_postgresql['data_dir'] = '/var/opt/gitlab/g
945eo-postgresql/data'
946#
947#################################################
948###############################
949# Pgbouncer (EE only)
950# See [GitLab PgBouncer documentation](http://doc
951s.gitlab.com/omnibus/settings/database.html#enabl
952ing-pgbouncer-ee-only)
953# See the [PgBouncer page](https://pgbouncer.gith
954ub.io/config.html) for details
955#################################################
956###############################
957# pgbouncer['enable'] = false
958# pgbouncer['log_directory'] = '/var/log/gitlab/p
959gbouncer'
960# pgbouncer['data_directory'] = '/var/opt/gitlab/
961pgbouncer'
962# pgbouncer['listen_addr'] = '0.0.0.0'
963# pgbouncer['listen_port'] = '6432'
964# pgbouncer['pool_mode'] = 'session'
965# pgbouncer['server_reset_query'] = 'DISCARD ALL'
966# pgbouncer['max_client_conn'] = '100'
967# pgbouncer['default_pool_size'] = '20'
968# pgbouncer['min_pool_size'] = '0'
969# pgbouncer['reserve_pool_size'] = '0'
970# pgbouncer['reserve_pool_timeout'] = '5.0'
971# pgbouncer['server_round_robin'] = '0'
972# pgbouncer['log_connections'] = '0'
973# pgbouncer['server_idle_timeout'] = '600.0'
974# pgbouncer['dns_max_ttl'] = '15.0'
975# pgbouncer['dns_zone_check_period'] = '0'
976# pgbouncer['dns_nxdomain_ttl'] = '15.0'
977# pgbouncer['admin_users'] = %w(gitlab-psql postg
978res pgbouncer)
979# pgbouncer['stats_users'] = %w(gitlab-psql postg
980res pgbouncer)
981# pgbouncer['ignore_startup_parameters'] = 'extra
982_float_digits'
983# pgbouncer['databases'] = {
984# DATABASE_NAME: {
985# host: HOSTNAME,
986# port: PORT
987# user: USERNAME,
988# password: PASSWORD
989###! generate this with `echo -n '$password + $us
990ername' | md5sum`
991# }
992# ...
993# }
994# pgbouncer['auth_type'] = 'md5'
995# pgbouncer['auth_hba_file'] = nil
996# pgbouncer['auth_query'] = 'SELECT username, pas
997sword FROM public.pg_shadow_lookup($1)'
998# postgresql['pgbouncer_user'] = nil
999# postgresql['pgbouncer_user_password'] = nil
1000root@gitlab:/etc/gitlab#