GitLab 单节点

1
  gitlab_rails['ldap_enabled'] = true
2
  gitlab_rails['ldap_servers'] = YAML.load <<-'EOS'
3
     main:
4
       label: 'LDAP'
5
       host: 'ccops.cc'
6
       port: 389
7
       uid: 'sAMAccountName'
8
       method: 'plain' # "tls" or "ssl" or "plain"
9
       bind_dn: 'ccops'
10
       password: 'passwd'
11
       active_directory: true
12
       allow_username_or_email_login: true
13
       base: 'OU=User Accounts,DC=ccops,DC=cc'
14
       user_filter: ''
15
       group_base: 'OU=Notes Groups,OU=Groups,DC=ccops,DC=cc'
16
       admin_group: ''
17
       sync_ssh_keys: false
18
  EOS

1
version: '3.6'
2
services:
3
  web:
4
    image: gitlab-ce:15.11.4
5
    restart: always
6
    # network_mode: "host" #主机网络
7
    hostname: 'gitlab.ccops.cc'
8
    environment:
9
      GITLAB_OMNIBUS_CONFIG: |
10
        external_url 'https://gitlab.ccops.cc'
11
        gitaly['custom_hooks_dir'] = "/opt/custom_hooks"
12
        gitlab_rails['gitlab_shell_ssh_port'] = 9922
13
        gitlab_rails['lfs_enabled'] = true
14
        gitlab_rails['object_store']['enabled'] = true
15
        gitlab_rails['object_store']['proxy_download'] = true
16
        gitlab_rails['object_store']['connection'] = {
17
          'provider' => 'AWS',
18
          'endpoint' => 'http://10.1.1.1:9000',
19
          'path_style' => true,
20
          'region' => 's-west-1',
21
          'aws_access_key_id' => 'minioadmin',
22
          'aws_secret_access_key' => 'qweasd',
23
          'aws_signature_version' => 2,
24
          'enable_signature_v4_streaming' => false
25
        }
26
        gitlab_rails['object_store']['objects']['lfs']['bucket'] = 'gitlab-lfs'
27
        gitlab_rails['object_store']['objects']['artifacts']['enabled'] = false
28
        gitlab_rails['object_store']['objects']['artifacts']['enabled'] = false
29
        gitlab_rails['object_store']['objects']['external_diffs']['enabled'] = false
30
        gitlab_rails['object_store']['objects']['uploads']['enabled'] = false
31
        gitlab_rails['object_store']['objects']['packages']['enabled'] = false
32
        gitlab_rails['object_store']['objects']['dependency_proxy']['enabled'] = false
33
        gitlab_rails['object_store']['objects']['terraform_state']['enabled'] = false
34
        gitlab_rails['object_store']['objects']['ci_secure_files']['enabled'] = false
35
        gitlab_rails['object_store']['objects']['pages']['enabled'] = false
36
        gitlab_rails['omniauth_auto_link_saml_user'] = true
37
        gitlab_rails['omniauth_allow_single_sign_on'] = ['saml']
38
        gitlab_rails['omniauth_providers'] = [
39
          {
40
        "name" => "saml",
41
        args: {
42
        assertion_consumer_service_url: 'https://gitlab.ccops.cc/users/auth/saml/callback', # 通过这个链接获取gitlab信息
43
        idp_cert_fingerprint: '6a:6a:26:1a:1e:1c:45:f9:a0:74:f2:eb:3e:41:d5:7e:51:dc:15:zd',
44
        idp_sso_target_url: 'https://stscn.ccops.cc/adfs/ls/IdpInqweedSignOn.aspx?loqwceRp=https://gitlab.ccops.cc',
45
          issuer: 'https://gitlab.ccops.cc',
46
          name_identifier_format: 'urn:oasis:names:tc:SAML:2.0:nameid-format:persistent'
47
           }
48
          }
49
        ]
50
        nginx['ssl_certificate'] = "/etc/gitlab/ssl/crt"
51
        nginx['ssl_certificate_key'] = "/etc/gitlab/ssl/key"
52
        nginx['listen_addresses'] = ['0.0.0.0']
53
        nginx['redirect_http_to_https'] = true
54
        # gitlab_rails['ldap_enabled'] = true
55
        # gitlab_rails['ldap_servers'] = YAML.load <<-'EOS'
56
        #    main:
57
        #      label: 'LDAP'
58
        #      host: 'ccops.cc'
59
        #      port: 389
60
        #      uid: 'sAMAccountName'
61
        #      method: 'plain' # "tls" or "ssl" or "plain"
62
        #      bind_dn: 'ccops'
63
        #      password: 'passwd'
64
        #      active_directory: true
65
        #      allow_username_or_email_login: true
66
        #      base: 'OU=User Accounts,DC=ccops,DC=cc'
67
        #      user_filter: ''
68
        #      group_base: 'OU=Notes Groups,OU=Groups,DC=ccops,DC=cc'
69
        #      admin_group: ''
70
        #      sync_ssh_keys: false
71
        # EOS
72
    ports:
73
      - '80:80'
74
      - '443:443'
75
    volumes:
76
      # - './sshd_config:/etc/ssh/sshd_config'
77
      - './cert:/etc/gitlab/ssl'
78
      - './logs:/var/log/gitlab'
79
      - './data:/var/opt/gitlab'
80
      - './config:/etc/gitlab'
81
      - './custom_hooks:/opt/custom_hooks'
82
    shm_size: '256m'
83
# 启动
84
docker-compose up -d
85

86
# 查看密码
87
docker exec -it gitlab-web-1 grep 'Password:' /etc/gitlab/initial_root_password
88

89
# 或者直接强制重置密码
90
docker exec -it gitlab-web-1 gitlab-rake "gitlab:password:reset[root]"