Gitlab - Revision history

Mowerick: fixed url format

2026-04-28T05:47:19Z

fixed url format

← Older revision		Revision as of 05:47, 28 April 2026
Line 169:		Line 169:


	Note: If you want to just be able to copy the url from the clone Gitlab menu consider changing the git user to the generated "gitlab" user or create some other user yourself. See gitlabs reference [~~Change the name of the git user or group](~~https://docs.gitlab.com/omnibus/settings/configuration/#change-the-name-of-the-git-user-or-group)		Note: If you want to just be able to copy the url from the clone Gitlab menu consider changing the git user to the generated "gitlab" user or create some other user yourself. See gitlabs reference [https://docs.gitlab.com/omnibus/settings/configuration/#change-the-name-of-the-git-user-or-group Change the name of the git user or group]

	<references />		<references />

Mowerick: Added note on how to change ssh user and group so ssh automatically reflects new ssh user

2026-04-28T05:44:45Z

Added note on how to change ssh user and group so ssh automatically reflects new ssh user

← Older revision		Revision as of 05:44, 28 April 2026
Line 167:		Line 167:
	IdentitiesOnly yes		IdentitiesOnly yes
	PreferredAuthentications publickey		PreferredAuthentications publickey


			Note: If you want to just be able to copy the url from the clone Gitlab menu consider changing the git user to the generated "gitlab" user or create some other user yourself. See gitlabs reference [Change the name of the git user or group](https://docs.gitlab.com/omnibus/settings/configuration/#change-the-name-of-the-git-user-or-group)

	<references />		<references />

KMalone42: Correcting the owner + group here to match gitlab runner.

2026-02-09T02:34:55Z

Correcting the owner + group here to match gitlab runner.

← Older revision		Revision as of 02:34, 9 February 2026
Line 11:		Line 11:
	sudo sh -c 'openssl rand -hex 32 > /var/lib/gitlab/secrets/activeRecordDeterministicKey'		sudo sh -c 'openssl rand -hex 32 > /var/lib/gitlab/secrets/activeRecordDeterministicKey'
	sudo sh -c 'openssl rand -hex 32 > /var/lib/gitlab/secrets/activeRecordSalt'		sudo sh -c 'openssl rand -hex 32 > /var/lib/gitlab/secrets/activeRecordSalt'
			sudo chown -R gitlab:gitlab /var/lib/gitlab/secrets
			sudo chmod 700 /var/lib/gitlab/secrets
	sudo chmod 0600 /var/lib/gitlab/secrets/*		sudo chmod 0600 /var/lib/gitlab/secrets/*
	</syntaxhighlight>		</syntaxhighlight>

KMalone42: As of the newer stable version (25.11) it appears that activeRecordPrimaryKeyFile, activeRecordDeterministicKeyFile, activeRecordSaltFile need to be declared.

2026-02-08T07:03:41Z

As of the newer stable version (25.11) it appears that activeRecordPrimaryKeyFile, activeRecordDeterministicKeyFile, activeRecordSaltFile need to be declared.

← Older revision		Revision as of 07:03, 8 February 2026
Line 5:		Line 5:
	== Installation ==		== Installation ==

	~~A minimal local installation of Gitlab might look like this~~		=== Generate Secrets ===
			<syntaxhighlight lang="bash">
			sudo install -d -m 0700 /var/lib/gitlab/secrets
			sudo sh -c 'openssl rand -hex 32 > /var/lib/gitlab/secrets/activeRecordPrimaryKey'
			sudo sh -c 'openssl rand -hex 32 > /var/lib/gitlab/secrets/activeRecordDeterministicKey'
			sudo sh -c 'openssl rand -hex 32 > /var/lib/gitlab/secrets/activeRecordSalt'
			sudo chmod 0600 /var/lib/gitlab/secrets/*
			</syntaxhighlight>

	<~~syntaxHighlight~~ lang="nix">		=== Nix Configuration ===
	services.gitlab = {		<syntaxhighlight lang="nix">services.gitlab = {
	enable = true;		enable = true;
	databasePasswordFile = pkgs.writeText "dbPassword" "zgvcyfwsxzcwr85l";		databasePasswordFile = pkgs.writeText "dbPassword" "zgvcyfwsxzcwr85l";
Line 17:		Line 24:
	dbFile = pkgs.writeText "dbsecret" "we2quaeZ";		dbFile = pkgs.writeText "dbsecret" "we2quaeZ";
	jwsFile = pkgs.runCommand "oidcKeyBase" {} "${pkgs.openssl}/bin/openssl genrsa 2048 > $out";		jwsFile = pkgs.runCommand "oidcKeyBase" {} "${pkgs.openssl}/bin/openssl genrsa 2048 > $out";
			activeRecordPrimaryKeyFile = "/var/lib/gitlab/secrets/activeRecordPrimaryKey";
			activeRecordDeterministicKeyFile = "/var/lib/gitlab/secrets/activeRecordDeterministicKey";
			activeRecordSaltFile = "/var/lib/gitlab/secrets/activeRecordSalt";
	};		};
	};		};
Line 32:		Line 42:
	services.openssh.enable = true;		services.openssh.enable = true;

	systemd.services.gitlab-backup.environment.BACKUP = "dump";		systemd.services.gitlab-backup.environment.BACKUP = "dump";</syntaxhighlight>
	</~~syntaxHighlight~~>

	After applying the configuration head to http://localhost and login with username <code>root</code> and the password specified in <code>initialRootPasswordFile</code>.		After applying the configuration head to http://localhost and login with username <code>root</code> and the password specified in <code>initialRootPasswordFile</code>.

Onny: /* See also */ Add reference to Forgejo

2025-12-15T09:58:24Z

Onny: Add see also section

2025-12-14T14:36:19Z

Add see also section

← Older revision		Revision as of 14:36, 14 December 2025
Line 158:		Line 158:

	<references />		<references />

			== See also ==

			* [[Gitea]], a web app, Git development repository and project management.

	[[Category:Server]]		[[Category:Server]]
	[[Category:Web Applications]]		[[Category:Web Applications]]
	[[Category:NixOS Manual]]		[[Category:NixOS Manual]]

Lelgenio: Add example for setting feature flags declaratively

2025-09-23T02:57:49Z

Add example for setting feature flags declaratively

@@ Line 66: / Line 66: @@
    host = "git.example.org";
 };
 </syntaxhighlight>

WoutSwinkels: Remove duplicate 'on the' under the 'Migrating an existing Gitlab to a Nixos installation' section

2025-02-20T09:02:39Z

Remove duplicate 'on the' under the 'Migrating an existing Gitlab to a Nixos installation' section

← Older revision		Revision as of 09:02, 20 February 2025
Line 69:		Line 69:

	=== Migrating an existing Gitlab to a Nixos installation ===		=== Migrating an existing Gitlab to a Nixos installation ===
	Make a backup ~~on the~~ on the old installation following the [https://docs.gitlab.com/administration/backup_restore/backup_gitlab/ Gitlab backup guide]. It is important to be on the same version and edition that you want to install on your new server.		Make a backup on the old installation following the [https://docs.gitlab.com/administration/backup_restore/backup_gitlab/ Gitlab backup guide]. It is important to be on the same version and edition that you want to install on your new server.

	Then install a Gitlab on the NixOS. Make sure you set the same secrets like on the old installation.		Then install a Gitlab on the NixOS. Make sure you set the same secrets like on the old installation.

WoutSwinkels: Update the 'Gitlab backup guide' url under the 'Migrating an existing Gitlab to a Nixos installation' section

2025-02-20T09:00:24Z

Update the 'Gitlab backup guide' url under the 'Migrating an existing Gitlab to a Nixos installation' section

← Older revision		Revision as of 09:00, 20 February 2025
Line 69:		Line 69:

	=== Migrating an existing Gitlab to a Nixos installation ===		=== Migrating an existing Gitlab to a Nixos installation ===
	Make a backup on the on the old installation following the [https://docs.gitlab.com/ee/~~raketasks~~/backup_gitlab~~.html~~ Gitlab backup guide]. It is important to be on the same version and edition that you want to install on your new server.		Make a backup on the on the old installation following the [https://docs.gitlab.com/administration/backup_restore/backup_gitlab/ Gitlab backup guide]. It is important to be on the same version and edition that you want to install on your new server.

	Then install a Gitlab on the NixOS. Make sure you set the same secrets like on the old installation.		Then install a Gitlab on the NixOS. Make sure you set the same secrets like on the old installation.

Almin17: Added note about closed-by-default ports.

2024-12-10T19:56:39Z

Added note about closed-by-default ports.

← Older revision		Revision as of 19:56, 10 December 2024
Line 40:		Line 40:
	A safer solution is to put them somewhere in the file system with the right chmod and owner set and include them using <code>./<filename></code> or to use a [[Comparison of secret managing schemes\|secret managment tool]]		A safer solution is to put them somewhere in the file system with the right chmod and owner set and include them using <code>./<filename></code> or to use a [[Comparison of secret managing schemes\|secret managment tool]]

	{{Note\|Since the version 15.7 GitLab blocks weak passwords<ref>https://gitlab.com/gitlab-org/gitlab/-/blob/master/doc/user/profile/user_passwords.md#block-weak-passwords</ref> on self-managed instances by default and providing one in initialRootPasswordFile results in a silent failure to create root user.}}		{{Note\|Since the version 15.7 GitLab blocks weak passwords<ref>https://gitlab.com/gitlab-org/gitlab/-/blob/master/doc/user/profile/user_passwords.md#block-weak-passwords</ref> on self-managed instances by default and providing one in initialRootPasswordFile results in a silent failure to create root user.}}{{Note\|Depending on the setup, access from another system than localhost might be required. In that case, it's necessary to open the ports, since NixOS defaults to having all ports closed. Look up networking.firewall.allowedTCPPorts.}}

	== Maintenance ==		== Maintenance ==

← Older revision		Revision as of 09:58, 15 December 2025
Line 162:		Line 162:

	* [[Gitea]], a web app, Git development repository and project management.		* [[Gitea]], a web app, Git development repository and project management.
			* [[Forgejo]], a web application offers Git development repositories and project management. Community fork of Gitea.

	[[Category:Server]]		[[Category:Server]]
	[[Category:Web Applications]]		[[Category:Web Applications]]
	[[Category:NixOS Manual]]		[[Category:NixOS Manual]]