架構

關閉防火墻

[root@gitlab ~]# systemctl stop firewalld
[root@gitlab ~]# systemctl disable firewalld

關閉SELinux

[root@gitlab ~]# setenforce 0
setenforce: SELinux is disabled

安裝依賴組件

[root@gitlab ~]# yum -y install curl policycoreutils openssh-server openssh-clients postfix

下載gitlab-ce倉庫

curl -sS https://packages.gitlab.com/install/repositories/gitlab/gitlab-ce/script.rpm.sh  | bash
 

。

啟動郵件服務器

[root@gitlab data]# systemctl start postfix
[root@gitlab data]# systemctl enable postfix

安裝gitlab

安裝omnibus gitlab-ce
omnibus相當於一鍵安裝包，自動安裝gitlab所依賴的所有組件

 yum -y install gitlab-ce

創建私鑰與證書

[root@gitlab data]# mkdir /etc/gitlab/ssl
[root@gitlab data]# openssl genrsa -out "/etc/gitlab/ssl/gitlab.aubin.com.key" 2048


創建申請證書
openssl req -new -key "/etc/gitlab/ssl/gitlab.aubin.com.key" -out "/etc/gitlab/ssl/gitlab.aubin.com.csr
Country Name (2 letter code) [XX]:cn                # 國家
State or Province Name (full name) []:bj            # 省份
Locality Name (eg, city) [Default City]:bj          # 城市
Organization Name (eg, company) [Default Company Ltd]:ctyun # 公司名
Organizational Unit Name (eg, section) []:ops       # 部門
Common Name (eg, your name or your server's hostname) []:gitlab.aubin.com
Email Address []:

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:


給申請證書簽名
[root@gitlab data]# openssl x509 -req -days 3650 -in "/etc/gitlab/ssl/gitlab.aubin.com.csr" -signkey "/etc/gitlab/ssl/gitlab.aubin.com.key" -out "/etc/gitlab/ssl/gitlab.aubin.com.crt"

創建pem
openssl dhparam -out /etc/gitlab/ssl/dhparams.pem 2048
 
修改權限
chmod 600 /etc/gitlab/ssl/*
 

配置gitlab

nginx['redirect_http_to_https'] = ture
nginx['ssl_client_certificate'] = "/etc/gitlab/ssl/gitlab.aubin.com.crt"
nginx['ssl_certificate'] = "/etc/gitlab/ssl/gitlab.aubin.com.crt"
nginx['ssl_certificate_key'] = "/etc/gitlab/ssl/gitlab.aubin.com.key"
nginx['ssl_dhparam'] = "/etc/gitlab/ssl/dhparams.pem"
nginx['listen_addresses'] = ['*']
nginx['listen_port'] = 9000
 

初始化所有配置

[root@gitlab ssl]# gitlab-ctl reconfigure

配置本地windows住的hosts文件

# gitlab
42.81.133.59 gitlab.aubin.com

瀏覽器訪問

初次進入需要設置管理員密碼(默認賬號為root),前面配置了nginx為https訪問，所以訪問地址應該為https

https://IP:9000

nginx配置文件

修改配置文件後要重啟gitlabgitlab-ctl restart

/var/opt/gitlab/nginx/conf/gitlab-http.conf

omnibus gitlab-ce安裝