Skip to content
Snippets Groups Projects
Commit a333bf69 authored by Craig Norris's avatar Craig Norris
Browse files

Update page with minor edits

Incorporate minor style edits for tone and clarity.
parent 66727263
No related branches found
No related tags found
No related merge requests found
Loading
Loading
@@ -183,9 +183,10 @@ can use this.
1. The CA file should be owned by the database user, and its permissions should be `0400`
 
NOTE: **Note:**
Do not use the filenames `server.crt` or `server.key` for these files. These are reserved for internal use of `omnibus-gitlab`.
Don't use the filenames `server.crt` or `server.key` for these files. These
filenames are reserved for the internal use of `omnibus-gitlab`.
 
1. Ensure the following is set in `gitlab.rb`.
1. Ensure the following is set in `gitlab.rb`:
 
```ruby
postgresql['ssl_cert_file'] = 'PATH_TO_CERTIFICATE'
Loading
Loading
@@ -199,9 +200,15 @@ can use this.
}
```
 
`listen_address` should be set to an IP address of the server that the clients will use to connect to the database.
`cert_auth_addresses` should contain a list of IP addresses, and the databases and users that are allowed to connect to the database. The key for `cert_auth_addresses` can also be specified using CIDR notation to incorporate a range of IP addresses.
1. Run `gitlab-ctl reconfigure` then `gitlab-ctl restart postgresql` in order for the new settings to take effect
Set `listen_address` as an IP address of the server that the clients will use
to connect to the database.
Ensure `cert_auth_addresses` contains a list of IP addresses, and the
databases and users that are allowed to connect to the database. You can use
CIDR notation when specifying the key for `cert_auth_addresses` to
incorporate an IP address range.
1. Run `gitlab-ctl reconfigure`, and then `gitlab-ctl restart postgresql` for
the new settings to take effect
 
#### Configure the Rails client
 
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment