67 Commits

Author SHA1 Message Date
Meta
f1e3aed633 Update README.md 2016-11-04 10:32:26 +00:00
winniehell
fbd343f725 use NE flag for RewriteRule 2016-10-21 21:34:17 +02:00
Samuel D. Leslie
b9afcfd8f9 Add the ErrorDocument for 502 and fix 503 for GitLab 8.8 release 2016-06-21 10:26:49 +10:00
Christopher Zentgraf
16bb99d435 Fix 400 error on percent encoded URLs 2016-03-24 01:19:17 +01:00
Christopher Zentgraf
59956b8223 Prevent Apache from serving uploads directly 2016-03-19 22:12:17 +01:00
Christopher Zentgraf
cfeb613c2a Don't escape percent encoded characters in api requests 2016-03-19 09:20:33 +01:00
Christopher Zentgraf
bb59a6c1b8 Don't redirect static files requests such as error documents 2016-03-19 08:38:02 +01:00
Christopher Zentgraf
fe1bb890a6 Fix URLs containing whitespace when GitLab used together with Apache
Turns off NoEscape flag. Adapted from https://gitlab.com/gitlab-org/gitlab-ce/issues/3163
2016-02-07 11:11:10 +01:00
Achilleas Pipinellis
4a5c145977 Be consistent with GitLab branch names 2016-02-02 20:40:48 +02:00
M. Ricketts
eb718282a2 Update to forward everything to GitLab workhorse 2016-01-28 12:27:09 +00:00
p-schneider
f03b1e950b unify Apache config files, fix missing RewriteCond lines for gitlab-workhorse in non-omnibus configs
(8 conf files with almost the same content easily run out of sync)
2015-11-26 01:55:14 +01:00
Jerome TAMARELLE
e44ea041dd Prevent double encoding of archive URL (Apache config)
When getting an archive from the API, the ID can be NAMESPACE/PROJECT_NAME
http://gitlab.mycompany.com/api/v3/projects/foo%2Fbar/repository/archive.zip?sha=87a5db5ea887763fa3a31a5471b512ff1596d9b8

The Apache option "NE" avoids double encoding of the %2F
2015-11-24 18:03:09 +01:00
Achilleas Pipinellis
420c144366 Add artifacts to apache 2015-11-23 19:26:44 +02:00
Achilleas Pipinellis
b4eaf4379c Add missing rewrite blocks for artifacts and lfs 2015-11-23 19:11:46 +02:00
Achilleas Pipinellis
078878c32f Rename configs to be consistent 2015-11-16 16:26:16 +02:00
Achilleas Pipinellis
6fe4a0c6d6 Change tested version to 8.2 2015-11-15 22:53:09 +02:00
Achilleas Pipinellis
bfa6fb3a95 Fix typos and wrong listen_addr for gitlab-workhorse 2015-11-15 22:42:08 +02:00
Achilleas Pipinellis
2a11c67460 Add missing omnibus configs for Apache and update instructions 2015-11-15 12:56:42 +02:00
Achilleas Pipinellis
9fdac5556f Revamp apache config files and README 2015-10-28 18:17:05 +02:00
Achilleas Pipinellis
1d70fd7c57 Fix regex 2015-10-28 17:20:42 +02:00
Adriano Cataluddi
e879c8244e Updated configuration for Gitlab 8.x and Apache Httpd 2.2.x. after rebase and integration of b8290a5c24 commit. 2015-10-26 22:34:47 +01:00
Adriano Cataluddi
12fba4387f Added configuration for Gitlab 8.x and Apache Httpd 2.2.x. 2015-10-26 22:18:02 +01:00
Daniel Widerin
b8290a5c24 Fix rewrites for gitlab-git-http-server
Aligned them to nginx config in gitlab-ce to make downloads work.
2015-10-24 22:06:02 +02:00
Achilleas Pipinellis
8cee293637 Merge branch 'master' of github.com:gitlabhq/gitlab-recipes 2015-10-12 12:39:02 +03:00
Vasiliy Tyubek
77d30b9a73 Issue #268 Updated Apache config for not to encode %2F double 2015-10-12 11:49:45 +03:00
Corey Sewell
b4987445bb Add notes on how to allow gitlab-git-http-server to listen on port 8181 2015-09-26 21:31:21 +12:00
Corey Sewell
12f752241a Always route uploads through Unicorn
Replace gitlab-git-http-server regex with that used for Nginx. Fixes #30
2015-09-25 14:56:22 +12:00
Corey Sewell
9cff0f5cd9 Typo fixes and notes update 2015-09-23 19:54:30 +12:00
Corey Sewell
c933b51053 Add example for GitLab 8.0 with Apache 2.4 2015-09-23 09:28:56 +12:00
Achilleas Pipinellis
2fa3ec7ab4 Add 'RequestHeader set X-Forwarded-Ssl on' in apache configs
https://github.com/gitlabhq/gitlabhq/issues/6119#issuecomment-131191050
2015-08-15 10:52:31 +03:00
Jérôme Tamarelle
73abde7501 (Apache) Keep slashes encoded for the API
> If using namespaced projects call make sure that the NAMESPACE/PROJECT_NAME
> is URL-encoded, eg. /api/v3/projects/diaspora%2Fdiaspora
> (where / is represented by %2F).
http://doc.gitlab.com/ce/api/projects.html#get-single-project
2014-06-30 15:40:28 +02:00
Achilleas Pipinellis
60748d95b9 Fixes #5 (gitlab.com) 2014-06-16 16:31:29 +03:00
Corin Simpson-Bryars
7c9cb85390 Update apache2.4 for forward secrecy/no compression
Adds forward secrecy and disables SSL/TLS compression which is potentially exploitable.
2014-04-10 02:44:34 +01:00
Fabrício Godoy
2a7a7a2346 Fixed SELinux modifications for Apache
The boolean httpd_enable_homedirs isn't needed. httpd_read_user_content is enough (http://serverfault.com/a/461738).
All file context rules can be applied in one transaction (http://danwalsh.livejournal.com/41593.html).
2014-03-23 19:17:19 -03:00
Charles Luzzato
649860a1f9 Added link to apache2.4 doc 2014-02-08 12:08:51 +00:00
Charles Luzzato
125a2d1f65 Added the file for HTTP access with Apache2.4 2014-02-08 12:05:37 +00:00
Charles Luzzato
c4f69ce3f8 Added information about the Apache2.4 files in the README.md 2014-02-08 12:03:54 +00:00
Chluz
5e16ecc3d6 Create new file for apache 2.4 and above
Changed the authorization commands to conform to apache2.4 and above
http://httpd.apache.org/docs/2.4/upgrading.html#access
2014-02-08 11:41:33 +00:00
Achilleas Pipinellis
5492da2729 Centos guide to be on par with official guide 2014-01-27 15:26:43 +02:00
Konrad Mohrfeldt
90d3a173bf add mod_headers module dependency for RequestHeader directive 2013-11-10 20:57:26 +01:00
codeling
61f39093fe Incorporate fix for incorrect http redirect
Incorporates fix from https://github.com/gitlabhq/gitlabhq/issues/715 to make gitlab properly redirect to https instead of http when configured for https
2013-11-09 11:50:07 +01:00
Sam Gleske
54314ecabc Apache config - better based on SSL config
This is a better proxy config which is based on the
gitlab-ssl.conf.
2013-10-30 15:30:41 -04:00
semiosis
eeea95da07 Changed the http-https redirect rule
As per comments by @sag47 here:
https://github.com/gitlabhq/gitlabhq/issues/4997#issuecomment-25738169
2013-10-04 21:10:35 -04:00
semiosis
98153fb3cc Fixing rewriterule
The (.*) regex didn't work with gitlab 6.1 so I switched back to using REQUEST_URI.
2013-10-03 22:29:52 -04:00
semiosis
29410935c8 Updated with suggestions from sag47
Made changes as per comments by @sag47

- Added ProxyPassReverse http://127.0.0.1:8080
Though I'm not sure what that's for.

- Simplified regex in rewriterule

- Put back in comments with links to external docs (nginx try)
2013-10-03 20:33:25 -04:00
semiosis
c4445b83bb Changed port from 9292 (puma) to 8080 (unicorn)
Fixed port in the proxy backend address for unicorn on port 8080 instead of puma on port 9292.
2013-10-03 13:40:17 -04:00
semiosis
05acc57c33 Simplified & improved apache proxy config
Previously there was an unnecessary redirect before & after sign-in to http.  This new configuration eliminates that leak, and is easier to read.
2013-10-03 13:27:24 -04:00
Sam Gleske
0a5b0e1b4e apache config README update
Replace instances of gitlab.conf with gitlab-ssl.conf.  The docs
should be more consistent on what it recommends.
2013-09-25 14:29:43 -04:00
Sam Gleske
003c15500b apache README grammar fix
changed system to environment
2013-09-25 14:18:40 -04:00
Sam Gleske
10b00585f3 apache README grammar corrections 2013-09-25 14:16:13 -04:00