Not replacing issue references are closed issues won't be moved.

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Oliver Kane authored 5 years ago and Achilleas Pipinellis committed 5 years ago

Update gitlab.rb template to include backup configs which opt-out of specific portions of a backup rake job.

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Ian Baum authored 5 years ago and Balasankar C committed 5 years ago

As this is still less common and old IDE won't accept EC certs,
only modern AEAD encryption methods are enabled.

CE MR: https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/30644

For users who have disabled the bundled postgresql daemon, this can be used to link the appropriate binaries accordingly.

Useful if they want to use our bundled backup rake tasks

Balasankar C authored 5 years ago and John Skarbek committed 5 years ago

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/14975 added
support for enabling the nonce-based `Content-Security-Type` headers,
which can significantly reduce JavaScript cross-site scripting (XSS)
attacks.

Currently this is not on by default because misconfiguring it
could potentially break loading of JavaScript. Users can configure
the `report_only` and `report_uri` values to report CSP violations
before they enable it completely.

In the future, we hope to generate reasonable defaults
(https://gitlab.com/gitlab-org/gitlab-ce/issues/65675) so that
GitLab will be secured by default.

DJ Mountney authored 5 years ago and Marin Jankovski committed 5 years ago

Where initial_license_file was mistyped

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Adding this helps the user not to forget to configure the region when copy/past/uncommenting the configuration from this file. The region parameter is required and the registry service will not start without it.

Ian Baum authored 5 years ago and Balasankar C committed 5 years ago

* obfuscate the command name of commands on the redis server to prevent
accidental, or malicious activity.

* Rename the KEYS command by default

Related to https://gitlab.com/gitlab-org/gitlab-pages/merge_requests/155

Now that we're shipping OpenSSL v1.1.1 and TLS v1.3 is becoming
used more frequently, let's enable it by default.

Closes https://gitlab.com/gitlab-org/omnibus-gitlab/issues/4526

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

This reverts commit 3ef77bee, reversing
changes made to 867da51d.

Create a new service role `monitoring_role` to simplify setup of
monitoring in HA environments.

Adding `consul["monitoring_service_discovery"] = false` to gitlab.rb.template

This reverts merge request !3364

On GitLab.com, we noticed pushes to the GitLab CE and EE repositories
were taking 3-4 minutes because they were advertising thousands of refs
from forked repositories..

Git added a config option, core.alternateRefsPrefixes, to fix that
issue.  From
https://github.com/git/git/commit/465e73fff380808f0ba3fb17984ab8636afb6405:

When pushing into a repository that borrows its objects from an
alternate object store, "git receive-pack" that responds to the push
request on the other side lists the tips of refs in the alternate to
reduce the amount of objects transferred.  This sometimes is detrimental
when the number of refs in the alternate is absurdly large, in which
case the bandwidth saved in potentially fewer objects transferred is
wasted in excessively large ref advertisement.  The alternate refs that
are advertised are now configurable with a pair of configuration
variables.

Since we don't need this configured on a per-repository basis, we
can set it as a global setting.

Closes https://gitlab.com/gitlab-org/gitaly/issues/1747

vshushlin authored 5 years ago and DJ Mountney committed 5 years ago

* remove auth_server from config template
* mark auth_server as deprecated in default attributes

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Krasimir Angelov authored 5 years ago and DJ Mountney committed 5 years ago

Related to https://gitlab.com/gitlab-org/gitlab-pages/issues/187

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>