mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 19:01:54 +00:00
kevinveenbirkenbachandClaude Opus 4.8
0bf1e8ef8c
Deploy GitLab from the official CNG CE images as six services: webservice (puma) and sidekiq scale to the topology default, workhorse is the sole HTTP entry, gitaly and a one-shot migrations job are pinned singletons, shell runs gitlab-sshd. The Omnibus container, its Dockerfile and the GITLAB_OMNIBUS_* config groups are removed. All rails/workhorse/shell/gitaly configs and shared secrets are pre-rendered by Ansible and mounted read-only; eleven credentials land in meta/schema.yml including an rsa_pem_2048 OIDC signing key (new value_generator algorithm). Postgres, redis and S3 object storage ride the existing lookups; OIDC, SMTP, the public SSH port and the root password are preserved. compose_volumes gains a per-volume nfs:false opt-out so the gitaly repositories volume stays node-local in swarm (upstream forbids git repositories on NFS); nfs_prep skips volumes without driver_opts accordingly. The Nextcloud gitlab integration execs the CNG rails runner. ruby_single_line dies with its only consumer; ruby_dq keeps test coverage. Ports (8181/8080/2222/8075/3808/9122) and service names resolve from single SPOT declarations in meta/services.yml via vars constants; the version pin sits on the webservice image pair so the updater can bump it. Live-validated in compose up to all six services healthy and migrations completed; fresh-install-only semantics for existing Omnibus data are documented. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
62 lines
1.5 KiB
Django/Jinja
62 lines
1.5 KiB
Django/Jinja
---
|
|
:queues:
|
|
- [post_receive, 5]
|
|
- [merge, 5]
|
|
- [update_merge_requests, 3]
|
|
- [process_commit, 3]
|
|
- [new_note, 2]
|
|
- [new_issue, 2]
|
|
- [new_merge_request, 2]
|
|
- [build, 2]
|
|
- [pipeline, 2]
|
|
- [pipeline_processing, 5]
|
|
- [pipeline_default, 3]
|
|
- [pipeline_cache, 3]
|
|
- [pipeline_hooks, 2]
|
|
- [gitlab_shell, 2]
|
|
- [email_receiver, 2]
|
|
- [emails_on_push, 2]
|
|
- [mailers, 2]
|
|
- [invalid_gpg_signature_update, 2]
|
|
- [create_gpg_signature, 2]
|
|
- [upload_checksum, 1]
|
|
- [repository_fork, 1]
|
|
- [repository_import, 1]
|
|
- [project_service, 1]
|
|
- [delete_user, 1]
|
|
- [delete_merged_branches, 1]
|
|
- [authorized_projects, 1]
|
|
- [expire_build_instance_artifacts, 1]
|
|
- [group_destroy, 1]
|
|
- [irker, 1]
|
|
- [namespaceless_project_destroy, 1]
|
|
- [project_cache, 1]
|
|
- [project_destroy, 1]
|
|
- [project_export, 1]
|
|
- [web_hook, 1]
|
|
- [repository_check, 1]
|
|
- [git_garbage_collect, 1]
|
|
- [reactive_caching, 1]
|
|
- [cronjob, 1]
|
|
- [default, 1]
|
|
- [pages, 1]
|
|
- [system_hook_push, 1]
|
|
- [update_user_activity, 1]
|
|
- [propagate_service_template, 1]
|
|
- [background_migration, 1]
|
|
- [gcp_cluster, 1]
|
|
- [project_migrate_hashed_storage, 1]
|
|
- [storage_migrator, 1]
|
|
- [ldap_group_sync, 2]
|
|
- [geo, 1]
|
|
- [repository_update_mirror, 1]
|
|
- [repository_update_remote_mirror, 1]
|
|
- [project_update_repository_storage, 1]
|
|
- [admin_emails, 1]
|
|
- [geo_repository_update, 1]
|
|
- [elastic_batch_project_indexer, 1]
|
|
- [elastic_indexer, 1]
|
|
- [elastic_commit_indexer, 1]
|
|
- [export_csv, 1]
|
|
- [object_storage_upload, 1]
|