_support/terraform/roles/praefect/templates/praefect-gitlab.rb.j2


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47

# Disable all other services on the Praefect node
postgresql['enable'] = false
redis['enable'] = false
nginx['enable'] = false
alertmanager['enable'] = false
prometheus['enable'] = false
grafana['enable'] = false
puma['enable'] = false
sidekiq['enable'] = false
gitlab_workhorse['enable'] = false
gitaly['enable'] = false

# Enable only the Praefect service
praefect['enable'] = true

# Prevent database connections during 'gitlab-ctl reconfigure'
gitlab_rails['rake_cache_clear'] = false
gitlab_rails['auto_migrate'] = false

praefect['listen_addr'] = '0.0.0.0:2305'

# Enable Prometheus metrics access to Praefect. You must use firewalls
# to restrict access to this address/port.
praefect['prometheus_listen_addr'] = '0.0.0.0:9652'

praefect['auth_token'] = '{{ praefect_external_token }}'

praefect['database_host'] = '{{ groups['databases'][0] }}'
praefect['database_port'] = 5432
praefect['database_user'] = 'praefect'
praefect['database_password'] = '{{ praefect_database_password }}'
praefect['database_dbname'] = 'praefect_production'
praefect['database_sslmode'] = 'disable'

# Name of storage hash must match storage name in git_data_dirs on GitLab
# server ('praefect') and in git_data_dirs on Gitaly nodes ('gitaly-1')
praefect['virtual_storages'] = {
  'default' => {
{% for host in groups['gitalies'] %}
    'gitaly-{{ loop.index }}' => {
      'address' => 'tcp://{{ hostvars[host]['internal'] }}:8075',
      'token'   => '{{ praefect_internal_token }}',
      'primary' => {{ (loop.index == 0)|string|lower }},
    },
{% endfor %}
  },
}