Privilege separation / System un-clogging - Upgrading from manual installation to Omnibus/Debian distribution
Hi, I've been running for a few years Gitlab-CE package using manual installation (git, bundler, ...)
It keeps getting harder to keep the installation up-to-date and working with all quirks (I have different paths, different users, etc...)
What is holding me from upgrading to omnibus/debian is what initially led me to installing manually, and that is strict separation of gitlab processes from system (even in installation phase) and not clogging my full OS installation with all the gitlab dependencies (mainly ruby gems). Also being able not to install parts I don't need (such as CI / containers, ..)
So my question stands like this: Is it possible to achieve gitlab omnibus or other mean of install, that is not manual, but from installation to run is kept strictly under de-escalated privileges (such as gitlab user) ? If so, how ? Also I'm running the Gitlab behind Apache2.4 reverse proxy, is this supported in omnibus/debian packages, or will I have to hack it somehow to get it working (I already have working apache virtualhost configuration tested over the years)
Thank you!