GitLab CE

Root Password

If you haven't set the root password using the environment variable GITLAB_ROOT_PASSWORD or the gitlab_rails['initial_root_password'] setting in gitlab.rb, you can find it after the first run at /etc/gitlab/initial_root_password within the container.

Note: This file is only available for the first 24 hours after creation!

To retrieve the password:

1. Log in to the host.
2. Access the container using the command: docker exec -it gitlab /bin/bash.
3. Run the command: cat /etc/gitlab/initial_root_password.

To-Do

Test GitLab without auto user generation (create users as OS and map the /etc/passwd file to the container).

Disable Signup

You need to manually turn off the signup feature. For more details, check: GitLab Issue #2837.

LDAP Support

To enable LDAP support, set the following variables:

• gitlab__ldap_server_host_ip: Your LDAP server's IP.
• gitlab__ldap_server_host_port: Your LDAP server's port.

Other settings:

• gitlab__ldap_search_users: Set the base search path for users.
• gitlab__ldap_search_groups: Not yet implemented.
• gitlab__ldap_auth_bind_dn: The user used to connect to the LDAP server (minimum access needed).
• gitlab__ldap_auth_bind_pass: This user's password.
• gitlab__ldap_user_filter: Specifies the group users must belong to for access.

Microsoft Active Directory

For MS Active Directory, set gitlab__ldap_is_ad to true and use a specific prefix for user_search: (memberOf:1.2.840.113556.1.4.194:=CN=....) instead of (memberOf=CN=.....).

Gitlab.rb

When you create the gitlab.rb file, it will not be overwritten by default. Manual changes won't be reset by future playbook runs. Be cautious when changing variables found in the template, like LDAP, as these updates may not reflect.

SSL

To use SSL certificates for GitLab and/or the Docker registry service:

1. Place the certificate files in ./files/certs/* (create this directory if it doesn't exist).
2. Add the certificate filenames to your playbook:

gitlab__ssl_cert_file: 'git.example.com.pub'
gitlab__ssl_cert_key_file: 'git.example.com.key'
# Optional:
gitlab__registery_ssl_cert_file: 'registery.example.com'
gitlab__registery_ssl_cert_key_file: 'registery.example.key'

Trusted SSL Root Certificates

To add trusted root certificates, put the certificate files in ./files/certs/trusted-certs/ so that they can be transferred to the host.