mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-09-08 11:17:17 +02:00
Kevin Veen-Birkenbach
5f66c1a622
Compute POSTGRES_ALLOWED_AVG_CONNECTIONS once and propagate to app roles (gitlab, mastodon, listmonk, matrix, pretix, mobilizon, openproject, discourse). Fix docker-compose postgres command (-c flags split). Add unit tests. Minor env/locale tweaks and includes. Conversation: https://chatgpt.com/share/68b48e72-cc28-800f-9c21-270cbc17d82a
70 lines
3.4 KiB
YAML
70 lines
3.4 KiB
YAML
# General
|
|
application_id: "web-app-gitlab"
|
|
database_type: "postgres"
|
|
|
|
# GitLab
|
|
GITLAB_URL: "{{ domains | get_url(application_id, WEB_PROTOCOL) }}"
|
|
GITLAB_HOSTNAME: "{{ domains | get_domain(application_id) }}"
|
|
|
|
## OIDC
|
|
GITLAB_OIDC_ENABLED: "{{ applications | get_app_conf(application_id, 'features.oidc') }}"
|
|
GITLAB_OIDC_LABEL: "{{ OIDC.BUTTON_TEXT }}"
|
|
GITLAB_OIDC_UID_FIELD: "{{ OIDC.ATTRIBUTES.USERNAME }}"
|
|
GITLAB_OIDC_CLIENT_ID: "{{ OIDC.CLIENT.ID }}"
|
|
GITLAB_OIDC_CLIENT_SECRET: "{{ OIDC.CLIENT.SECRET }}"
|
|
GITLAB_OIDC_ISSUER: "{{ OIDC.CLIENT.ISSUER_URL }}"
|
|
GITLAB_OIDC_REDIRECT_URI: "{{ GITLAB_URL }}/users/auth/openid_connect/callback"
|
|
|
|
## Docker
|
|
GITLAB_INIT_ROOT_PASSWORD: "{{ users.administrator.password }}"
|
|
GITLAB_VERSION: "{{ applications | get_app_conf(application_id, 'docker.services.gitlab.version') }}"
|
|
GITLAB_IMAGE: "{{ applications | get_app_conf(application_id, 'docker.services.gitlab.image') }}"
|
|
GITLAB_CONTAINER: "{{ applications | get_app_conf(application_id, 'docker.services.gitlab.name') }}"
|
|
GITLAB_CONF_VOLUME: "{{ applications | get_app_conf(application_id, 'docker.volumes.config') }}"
|
|
GITLAB_LOGS_VOLUME: "{{ applications | get_app_conf(application_id, 'docker.volumes.logs') }}"
|
|
GITLAB_DATA_VOLUME: "{{ applications | get_app_conf(application_id, 'docker.volumes.data') }}"
|
|
|
|
## Configuration
|
|
GITLAB_OMNIBUS_BASE:
|
|
- "external_url '{{ GITLAB_URL }}'"
|
|
- "postgresql['enable']=false"
|
|
- "gitlab_rails['gitlab_shell_ssh_port']={{ ports.public.ssh[application_id] }}"
|
|
- "gitlab_rails['db_adapter']='postgresql'"
|
|
- "gitlab_rails['db_encoding']='utf8'"
|
|
- "gitlab_rails['db_host']='{{ database_host }}'"
|
|
- "gitlab_rails['db_port']='{{ database_port }}'"
|
|
- "gitlab_rails['db_username']='{{ database_username }}'"
|
|
- "gitlab_rails['db_password']='{{ database_password }}'"
|
|
- "gitlab_rails['db_database']='{{ database_name }}'"
|
|
- "gitlab_rails['db_pool']={{ POSTGRES_ALLOWED_AVG_CONNECTIONS }}"
|
|
- "nginx['listen_port']=80"
|
|
- "nginx['listen_https']=false"
|
|
- ""
|
|
- "gitlab_rails['initial_root_password']='{{ GITLAB_INIT_ROOT_PASSWORD }}'"
|
|
- ""
|
|
- "redis['enable']=false"
|
|
- "gitlab_rails['redis_host']='redis'"
|
|
- "gitlab_rails['redis_port']='6379'"
|
|
|
|
GITLAB_OMNIBUS_OIDC:
|
|
- ""
|
|
- "gitlab_rails['omniauth_enabled']=true"
|
|
- "gitlab_rails['omniauth_allow_single_sign_on']=['openid_connect']"
|
|
- "gitlab_rails['omniauth_block_auto_created_users']=false"
|
|
- "gitlab_rails['omniauth_auto_link_user']=['openid_connect']"
|
|
- "gitlab_rails['omniauth_providers']=[{ name: 'openid_connect', label: '{{ GITLAB_OIDC_LABEL | replace(\"'\",\"\\\\'\") }}', args: {"
|
|
- " name: 'openid_connect',"
|
|
- " scope: ['openid','profile','email'],"
|
|
- " response_type: 'code',"
|
|
- " issuer: '{{ GITLAB_OIDC_ISSUER | replace(\"'\",\"\\\\'\") }}',"
|
|
- " discovery: true,"
|
|
- " uid_field: '{{ GITLAB_OIDC_UID_FIELD | replace(\"'\",\"\\\\'\") }}',"
|
|
- " pkce: true,"
|
|
- " client_options: {"
|
|
- " identifier: '{{ GITLAB_OIDC_CLIENT_ID | replace(\"'\",\"\\\\'\") }}',"
|
|
- " secret: '{{ GITLAB_OIDC_CLIENT_SECRET | replace(\"'\",\"\\\\'\") }}',"
|
|
- " redirect_uri: '{{ GITLAB_OIDC_REDIRECT_URI | replace(\"'\",\"\\\\'\") }}'"
|
|
- " }"
|
|
- "} }]"
|
|
|
|
GITLAB_OMNIBUS_ALL: "{{ GITLAB_OMNIBUS_BASE + (GITLAB_OMNIBUS_OIDC if GITLAB_OIDC_ENABLED else []) }}" |