GitLab 单节点迁移到集群

1
# Avoid running unnecessary services on the Gitaly server
2
postgresql['enable'] = false
3
redis['enable'] = false
4
nginx['enable'] = false
5
puma['enable'] = false
6
unicorn['enable'] = false
7
sidekiq['enable'] = false
8
gitlab_workhorse['enable'] = false
9
grafana['enable'] = false
10

11
# If you run a separate monitoring node you can disable these services
12
alertmanager['enable'] = false
13
prometheus['enable'] = false
14

15
# Prevent database migrations from running on upgrade automatically
16
gitlab_rails['auto_migrate'] = false
17

18
# Enable only the Gitaly service
19
gitaly['enable'] = true
20

21
# Configure the gitlab-shell API callback URL. Without this, `git push` will
22
# fail. This can be your 'front door' GitLab URL or an internal load
23
# balancer.
24
# Don't forget to copy `/etc/gitlab/gitlab-secrets.json` from web server to Gitaly server
25
gitlab_rails['internal_api_url'] = 'https://gitlab-tst.ccops.cc'
26

27
# Make Gitaly accept connections on all network interfaces. You must use
28
# firewalls to restrict access to this address/port.
29
# Comment out following line if you only want to support TLS connections
30
gitaly['tls_listen_addr'] = "0.0.0.0:9999"
31
gitaly['certificate_path'] = "/etc/gitlab/ssl/server-1.pem"
32
gitaly['key_path'] = "/etc/gitlab/ssl/server.key"
33

34
# Enable service discovery for Prometheus
35
consul['enable'] = false
36
consul['monitoring_service_discovery'] =  false
37

38
# Set the network addresses that the exporters will listen on for monitoring
39
gitaly['prometheus_listen_addr'] = "0.0.0.0:9236"
40

41
# Gitaly Auth Token
42
# Should be the same as praefect_internal_token
43
gitaly['auth_token'] = 'LYIddgqhn91xxxxxDtLSTnO'
44
gitlab_shell['secret_token'] = 'vIH3gfTxxxxxxnY3ZH7DDVX17YJ'
45

46
git_data_dirs({
47
  'default' => {'gitaly_address' => 'tls://gitaly-1-.ccops.cc:9999','path' => '/git-repos'},
48
})