Download as
Browse Code »

Commit 508d48668e5644367bbf0e9920059da325be50a8

Authored by Jacob Vosmaer
1 parent 0f3476b3
Exists in master and in 17 other branches 6-6-stable, 6-6-stable-ee, 6-7-stable, 6-7-stable-ee, 6-8-stable, 6-8-stable-ee, 6-9-stable, 6-9-stable-ee, 7-0-stable, 7-0-stable-ee, 7-0-stable-spb, 7-1-stable, 7-1-stable-ee, 7-2-stable, 7-2-stable-ee, branch_test, nginx_ssl_tweaks

Delete attributes we do not need for postgres

Showing 1 changed file with 0 additions and 95 deletions   Show diff stats
files/gitlab-cookbooks/gitlab/attributes/default.rb
  Diff comments   View file @508d486
... ... @@ -16,101 +16,6 @@
16 16 #
17 17  
18 18 ###
19   -# High level options
20   -###
21   -default['gitlab']['notification_email'] = "info@example.com"
22   -default['gitlab']['bootstrap']['enable'] = true
23   -
24   -####
25   -# The Chef User that services run as
26   -####
27   -# The username for the chef services user
28   -default['gitlab']['user']['username'] = "gitlab"
29   -# The shell for the chef services user
30   -default['gitlab']['user']['shell'] = "/bin/sh"
31   -# The home directory for the chef services user
32   -default['gitlab']['user']['home'] = "/opt/gitlab/embedded"
33   -
34   -####
35   -# Chef Server WebUI
36   -####
37   -default['gitlab']['gitlab-webui']['enable'] = true
38   -default['gitlab']['gitlab-webui']['ha'] = false
39   -default['gitlab']['gitlab-webui']['dir'] = "/var/opt/gitlab/gitlab-webui"
40   -default['gitlab']['gitlab-webui']['log_directory'] = "/var/log/gitlab/gitlab-webui"
41   -default['gitlab']['gitlab-webui']['environment'] = 'chefserver'
42   -default['gitlab']['gitlab-webui']['listen'] = '127.0.0.1'
43   -default['gitlab']['gitlab-webui']['vip'] = '127.0.0.1'
44   -default['gitlab']['gitlab-webui']['port'] = 9462
45   -default['gitlab']['gitlab-webui']['backlog'] = 1024
46   -default['gitlab']['gitlab-webui']['tcp_nodelay'] = true
47   -default['gitlab']['gitlab-webui']['worker_timeout'] = 3600
48   -default['gitlab']['gitlab-webui']['umask'] = "0022"
49   -default['gitlab']['gitlab-webui']['worker_processes'] = 2
50   -default['gitlab']['gitlab-webui']['session_key'] = "_sandbox_session"
51   -default['gitlab']['gitlab-webui']['cookie_domain'] = "all"
52   -default['gitlab']['gitlab-webui']['cookie_secret'] = "47b3b8d95dea455baf32155e95d1e64e"
53   -default['gitlab']['gitlab-webui']['web_ui_client_name'] = "chef-webui"
54   -default['gitlab']['gitlab-webui']['web_ui_admin_user_name'] = "admin"
55   -default['gitlab']['gitlab-webui']['web_ui_admin_default_password'] = "p@ssw0rd1"
56   -
57   -###
58   -# Load Balancer
59   -###
60   -default['gitlab']['lb']['enable'] = true
61   -default['gitlab']['lb']['vip'] = "127.0.0.1"
62   -default['gitlab']['lb']['api_fqdn'] = node['fqdn']
63   -default['gitlab']['lb']['web_ui_fqdn'] = node['fqdn']
64   -default['gitlab']['lb']['cache_cookbook_files'] = false
65   -default['gitlab']['lb']['debug'] = false
66   -default['gitlab']['lb']['upstream']['erchef'] = [ "127.0.0.1" ]
67   -default['gitlab']['lb']['upstream']['gitlab-webui'] = [ "127.0.0.1" ]
68   -default['gitlab']['lb']['upstream']['bookshelf'] = [ "127.0.0.1" ]
69   -
70   -####
71   -# Nginx
72   -####
73   -default['gitlab']['nginx']['enable'] = true
74   -default['gitlab']['nginx']['ha'] = false
75   -default['gitlab']['nginx']['dir'] = "/var/opt/gitlab/nginx"
76   -default['gitlab']['nginx']['log_directory'] = "/var/log/gitlab/nginx"
77   -default['gitlab']['nginx']['ssl_port'] = 443
78   -default['gitlab']['nginx']['enable_non_ssl'] = false
79   -default['gitlab']['nginx']['non_ssl_port'] = 80
80   -default['gitlab']['nginx']['server_name'] = node['fqdn']
81   -default['gitlab']['nginx']['url'] = "https://#{node['fqdn']}"
82   -# These options provide the current best security with TSLv1
83   -#default['gitlab']['nginx']['ssl_protocols'] = "-ALL +TLSv1"
84   -#default['gitlab']['nginx']['ssl_ciphers'] = "RC4:!MD5"
85   -# This might be necessary for auditors that want no MEDIUM security ciphers and don't understand BEAST attacks
86   -#default['gitlab']['nginx']['ssl_protocols'] = "-ALL +SSLv3 +TLSv1"
87   -#default['gitlab']['nginx']['ssl_ciphers'] = "HIGH:!MEDIUM:!LOW:!ADH:!kEDH:!aNULL:!eNULL:!EXP:!SSLv2:!SEED:!CAMELLIA:!PSK"
88   -# The following favors performance and compatibility, addresses BEAST, and should pass a PCI audit
89   -default['gitlab']['nginx']['ssl_protocols'] = "SSLv3 TLSv1"
90   -default['gitlab']['nginx']['ssl_ciphers'] = "RC4-SHA:RC4-MD5:RC4:RSA:HIGH:MEDIUM:!LOW:!kEDH:!aNULL:!ADH:!eNULL:!EXP:!SSLv2:!SEED:!CAMELLIA:!PSK"
91   -default['gitlab']['nginx']['ssl_certificate'] = nil
92   -default['gitlab']['nginx']['ssl_certificate_key'] = nil
93   -default['gitlab']['nginx']['ssl_country_name'] = "US"
94   -default['gitlab']['nginx']['ssl_state_name'] = "WA"
95   -default['gitlab']['nginx']['ssl_locality_name'] = "Seattle"
96   -default['gitlab']['nginx']['ssl_company_name'] = "YouCorp"
97   -default['gitlab']['nginx']['ssl_organizational_unit_name'] = "Operations"
98   -default['gitlab']['nginx']['ssl_email_address'] = "you@example.com"
99   -default['gitlab']['nginx']['worker_processes'] = node['cpu']['total'].to_i
100   -default['gitlab']['nginx']['worker_connections'] = 10240
101   -default['gitlab']['nginx']['sendfile'] = 'on'
102   -default['gitlab']['nginx']['tcp_nopush'] = 'on'
103   -default['gitlab']['nginx']['tcp_nodelay'] = 'on'
104   -default['gitlab']['nginx']['gzip'] = "on"
105   -default['gitlab']['nginx']['gzip_http_version'] = "1.0"
106   -default['gitlab']['nginx']['gzip_comp_level'] = "2"
107   -default['gitlab']['nginx']['gzip_proxied'] = "any"
108   -default['gitlab']['nginx']['gzip_types'] = [ "text/plain", "text/css", "application/x-javascript", "text/xml", "application/xml", "application/xml+rss", "text/javascript", "application/json" ]
109   -default['gitlab']['nginx']['keepalive_timeout'] = 65
110   -default['gitlab']['nginx']['client_max_body_size'] = '250m'
111   -default['gitlab']['nginx']['cache_max_size'] = '5000m'
112   -
113   -###
114 19 # PostgreSQL
115 20 ###
116 21 default['gitlab']['postgresql']['enable'] = true
... ...