Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-12-12Upgrade NGINX configuration files to add websocket supportNick Thomas
2016-08-08Revert "Defend against 'Host' header injection"Jacob Vosmaer
This reverts commit 47b5b441395921e9f8e9982bb3f560e5db5a67bc. See https://gitlab.com/gitlab-org/gitlab-ce/issues/17877#note_13488047
2016-07-12Defend against 'Host' header injectionJacob Vosmaer
Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/17877 . This change adds 'defense in depth' against 'Host' HTTP header injection. It affects normal users in the following way. Suppose your GitLab server has IP address 1.2.3.4 and hostname gitlab.example.com. Currently, if you enter 1.2.3.4 in your browser, you get redirected to 1.2.3.4/users/sign_in. After this change, you get redirected from 1.2.3.4 to gitlab.example.com/users/sign_in. This is because the address you typed in the address bar of your browser ('1.2.3.4'), which gets stored in the 'Host' header, is now being overwritten to 'gitlab.example.com' in NGINX. In this change we also make NGINX clear the 'X-Forwarded-Host' header because Ruby on Rails also uses that header the same wayas the 'Host' header. We think that for most GitLab servers this is the right behavior, and if not then administrators can change this behavior themselves at the NGINX level.
2016-05-23Add note about port needed in NGINX configAchilleas Pipinellis
2016-05-22Add NGINX config file for RegistryAchilleas Pipinellis
2016-04-28Replace gitlab-workhorse with GitLab Workhorse where appropriateAchilleas Pipinellis
2016-04-22Add a branded 503 static error pageRobert Speicher
[ci skip] Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15398
2016-04-14Remove deprecated NGINX CI configAchilleas Pipinellis
2016-03-11Do not serve anything via nginx as we have workhorseArtem Sidorenko
Otherwise this might 'hide' problems https://github.com/gitlabhq/gitlabhq/issues/10053#issuecomment-188919319
2016-02-10Merge branch 'doc_relative_url' into 'master' Achilleas Pipinellis
Add documentation on relative URL support closes #12773 See merge request !2770
2016-02-09Edit configuration files for relative URL supportAchilleas Pipinellis
[ci skip]
2016-02-08Merge branch 'fix-init' into 'master' Rémy Coutable
Fixed init.d script not working on OS X -s flag of su doesn't work correctly on OS X, logging in as the user and not running the requested command. By moving the bash shell init inside the su command we avoid the issue Fixes Issue #3309 See merge request !1728
2016-02-08Fixed init.d script not working on OS Xritave
-s flag of su doesn't work correctly on some systems, loging in the user and not running the requested command. By moving the bash shell init inside the su command we avoid the issue
2016-02-08suppress only errors in init-script while determining canonical path of ↵Harald Spaethe
gitlab_workhorse_dir
2016-01-25Consistent rails_socket use.fbretel
2016-01-21Init script changes for gitlab-workhorse in 8.4Jacob Vosmaer
2015-12-24Fix spelling of "it's" to "its" where appropriate.cafuego
2015-12-15Update init script options for gitlab-workhorseJacob Vosmaer
2015-12-11Pass all requests from NGINX to gitlab-workhorseJacob Vosmaer
2015-12-07Merge pull request #9892 from stetskevych/fix_nginx_ssl_configJacob Vosmaer
Fix gitlab-ssl nginx config to work when multiple server_names are served over https
2015-12-06Fix gitlab-ssl nginx config to work when multiple server_names are served ↵Vyacheslav Stetskevych
over https
2015-12-04Check GitLab Workhorse status in init.d script when reporting all components ↵Stan Hu
are up and running Closes https://github.com/gitlabhq/gitlabhq/issues/9869
2015-11-27Fix alignmentRobert Speicher
[ci skip]
2015-11-27Fix indentation in NGINX configJacob Vosmaer
2015-11-27Repeat "client_max_body_size 0" everywhereJacob Vosmaer
It turns out that if we do not the declaration from "location /" wins.
2015-11-19Merge branch 'client-max-body-size' into 'master' Robert Speicher
Do not limit workhorse POST/PUT size in NGINX Limiting, if any, should happen in gitlab-workhorse. See merge request !1831
2015-11-19Do not limit workhorse POST/PUT size in NGINXJacob Vosmaer
Limiting, if any, should happen in gitlab-workhorse.
2015-11-18Deploy page should be shown for all pages not just rootDrew Blessing
2015-11-16Add support for git lfs.Marin Jankovski
2015-11-10Fix nginx config to use @gitlab-workhorseKamil Trzcinski
2015-11-10Implement Build ArtifactsKamil Trzcinski
- Offloads uploading to GitLab Workhorse - Use /authorize request for fast uploading - Added backup recipes for artifacts - Support download acceleration using X-Sendfile
2015-10-29Switch to gitlab-workhorseJacob Vosmaer
2015-10-14Fix NGINX API download regexJacob Vosmaer
Users are allowed to supply namespace%2Fproject instead of a numeric ID
2015-10-08Let gitlab-git-http-server handle archive downloadsJacob Vosmaer
This change relies on changes in gitlab_git and gitlab-git-http-server.
2015-09-22Add missing rake and change nginx config for CI migrationKamil Trzcinski
2015-09-16Add missing proxy requests to migration docsKamil Trzcinski
2015-09-16Added migration docs and updated installation documentationKamil Trzcinski
2015-09-07The good stuff needs NGINX 1.7.11Jacob Vosmaer
2015-09-07Do not let NGINX buffer Git HTTP requestsJacob Vosmaer
Before this change NGINX would convert a chunked HTTP POST (e.g. git push) into a HTTP 1.0 single large POST. This creates an unnecessary delay, and it creates unnecessary memory pressure on gitlab-git-http-server. For the response ('proxy_buffering') I am less sure that NGINX 's buffering behavior is harmful, but it still makes more sense to me not to interfere with gitlab-git-http-server (and the Golang net/http server).
2015-08-31Be more defensive when running 'kill'Jacob Vosmaer
2015-08-31Replace grack with gitlab-git-http-serverJacob Vosmaer
2015-08-25Fix init script for Reply by emailDouwe Maan
2015-08-20Fix init.d script.Douwe Maan
2015-08-20Fix lib/support/init.d/gitlab.Douwe Maan
2015-08-19Update init scripts.Douwe Maan
2015-07-28Experimental support for gitlab-git-http-serverJacob Vosmaer
https://gitlab.com/gitlab-org/gitlab-git-http-server This change introduces the GITLAB_GRACK_AUTH_ONLY environment variable. When set, Grack requests to GitLab will only respond with the user's GL_ID (if the request is OK) or an error. This allows gitlab-git-http-server to use the main GitLab application as an authentication and authorization backend. If we like how this works we should drop the GITLAB_GRACK_AUTH_ONLY variable at some point in the future.
2015-07-20Merge pull request #9400 from tuxillo/patch-1Jacob Vosmaer
Use whoami instead of $USER
2015-06-22Merge branch 'nginx_defaulthost_documentation' into 'master'Dmitriy Zaporozhets
Close #178 Nginx conf default_host documentation This closes #178 We're just making it clear that some nginx installs such as by default on recent Ubuntu's, the /etc/nginx/sites-enabled/default file will conflict the listen line of the gitlab nginx conf's due to the default_server directive. changed installation.md to identify the issue to a user added notes to both nginx configs for gitlab and gitlab-ssl [ci-skip See merge request !225
2015-06-19Use whoami instead of $USERAntonio Huete Jimenez
- Use whoami instead of relying on the existence of $USER enviroment variable which is not always present
2015-06-15Update SSL ciphers per logjam vulnerability recommendations.Marin Jankovski