Network System Laboratory - GitLab のバックアップ差分(No.5)

--- 4: 2021-06-29 (火) 15:42:11 iseki
+++ 5: 2021-06-29 (火) 19:16:19 iseki
@@ Line 24: / Line 24: @@
  -r--------. 1 root root 1679  2月 19 15:14 gitlab.nsl.tuis.ac.jp.key
  -r--------. 1 root root 1675  2月 19 15:14 gitlab.nsl.tuis.ac.jp.key-staging
+#br
+*** [[Let's Encrypt]] [#n65ca20d]
+- 自動でやってくれるらしい
+- /etc/gitlab/gitlab.rb
+ external_url 'https://gitlab.nsl.tuis.ac.jp'
+ nginx['redirect_http_to_https'] = true
+ nginx['redirect_http_to_https_port'] = 80
+ nginx['ssl_certificate'] = "/etc/gitlab/ssl/gitlab.crt"
+ nginx['ssl_certificate_key'] = "/etc/gitlab/ssl/gitlab.key"
+ letsencrypt['enable'] = true
+ letsencrypt['contact_emails'] = ['iseki@rsch.tuis.ac.jp'] # This should be an array of email addresses to add as contacts
+ letsencrypt['group'] = 'root'
+ letsencrypt['key_size'] = 2048
+ letsencrypt['owner'] = 'root'
+ letsencrypt['wwwroot'] = '/var/opt/gitlab/nginx/www'
+ # See http://docs.gitlab.com/omnibus/settings/ssl.html#automatic-renewal for more on these sesttings
+ letsencrypt['auto_renew'] = true
+ letsencrypt['auto_renew_hour'] = 1
+ letsencrypt['auto_renew_minute'] = 0 # Should be a number or cron expression, if specified.
+ letsencrypt['auto_renew_day_of_month'] = "*/1"
+ letsencrypt['auto_renew_log_directory'] = '/var/log/gitlab/lets-encrypt'
+- Log: /var/log/gitlab/lets-encrypt/*
 #br

GitLab のバックアップ差分(No.5)