migrate

Docker/gitlab/files/.env

@@ -0,0 +1 @@
+GITLAB_ROOT_PASSWORD=<< root_password >>

Docker/gitlab/files/compose.yaml

@@ -0,0 +1,65 @@
+services:
+  << service_name >>:
+    image: docker.io/gitlab/gitlab-ce:18.11.2-ce.0
+    restart: << restart_policy >>
+    shm_size: '256m'
+    <%- if traefik_enabled %>
+    networks:
+      << traefik_network >>:
+    <%- endif %>
+    ports:
+      <%- if not traefik_enabled %>
+      - "<< ports_http >>:80"
+      <%- endif %>
+      - "<< ports_ssh >>:22"
+      <%- if registry_enabled and not traefik_enabled %>
+      - "<< ports_registry >>:5000"
+      <%- endif %>
+    volumes:
+      - ./config/gitlab.rb:/etc/gitlab/gitlab.rb:ro
+      - << service_name >>_config:/etc/gitlab
+      - << service_name >>_logs:/var/log/gitlab
+      - << service_name >>_data:/var/opt/gitlab
+    <%- if traefik_enabled  %>
+    labels:
+      - traefik.enable=true
+      - traefik.docker.network=<< traefik_network >>
+      - traefik.http.services.<< service_name >>_web.loadBalancer.server.port=80
+      - traefik.http.routers.<< service_name >>_http.service=<< service_name >>_web
+      - traefik.http.routers.<< service_name >>_http.rule=Host(`<< traefik_host >>.<< traefik_domain >>`)
+      - traefik.http.routers.<< service_name >>_http.entrypoints=<< traefik_entrypoint >>
+      <%- if traefik_tls_enabled %>
+      - traefik.http.routers.<< service_name >>_https.service=<< service_name >>_web
+      - traefik.http.routers.<< service_name >>_https.rule=Host(`<< traefik_host >>.<< traefik_domain >>`)
+      - traefik.http.routers.<< service_name >>_https.entrypoints=<< traefik_tls_entrypoint >>
+      - traefik.http.routers.<< service_name >>_https.tls=true
+      - traefik.http.routers.<< service_name >>_https.tls.certresolver=<< traefik_tls_certresolver >>
+      <%- endif %>
+      <%- if registry_enabled %>
+      - traefik.http.services.<< service_name >>_registry.loadBalancer.server.port=5000
+      - traefik.http.routers.<< service_name >>_registry-http.service=<< service_name >>_registry
+      - traefik.http.routers.<< service_name >>_registry-http.rule=Host(`<< traefik_registry_host >>`)
+      - traefik.http.routers.<< service_name >>_registry-http.entrypoints=<< traefik_entrypoint >>
+      <%- if traefik_tls_enabled %>
+      - traefik.http.routers.<< service_name >>_registry-https.service=<< service_name >>_registry
+      - traefik.http.routers.<< service_name >>_registry-https.rule=Host(`<< traefik_registry_host >>`)
+      - traefik.http.routers.<< service_name >>_registry-https.entrypoints=<< traefik_tls_entrypoint >>
+      - traefik.http.routers.<< service_name >>_registry-https.tls=true
+      - traefik.http.routers.<< service_name >>_registry-https.tls.certresolver=<< traefik_tls_certresolver >>
+      <%- endif %>
+      <%- endif %>
+    <%- endif %>
+
+volumes:
+  << service_name >>_config:
+    driver: local
+  << service_name >>_logs:
+    driver: local
+  << service_name >>_data:
+    driver: local
+
+<%- if traefik_enabled %>
+networks:
+  << traefik_network >>:
+    external: true
+<%- endif %>

Docker/gitlab/files/config/gitlab.rb

@@ -0,0 +1,94 @@
+# GitLab Configuration
+external_url '<< external_url >>'
+
+# Initial root user configuration (only used on first initialization)
+gitlab_rails['initial_root_password'] = '<< root_password >>'
+gitlab_rails['initial_root_email'] = '<< root_email >>'
+
+# GitLab Shell SSH settings
+gitlab_rails['gitlab_shell_ssh_port'] = << ports_ssh >>
+
+# Let's Encrypt and built-in TLS settings are currently not supported by the template
+# as we are using Traefik as a reverse proxy
+letsencrypt['enable'] = false
+nginx['listen_port']  = 80
+nginx['listen_https'] = false
+
+<%- if traefik_tls_enabled %>
+# Traefik settings, to redirect http to https
+nginx['redirect_http_to_https'] = true
+<%- endif %>
+
+<%- if registry_enabled %>
+# Container Registry settings
+registry_external_url '<< registry_external_url >>'
+gitlab_rails['registry_enabled']  = true
+registry_nginx['listen_https']    = false
+registry_nginx['listen_port']     = 5000
+<%- endif %>
+
+<%- if authentik_enabled %>
+# Authentik SSO settings
+gitlab_rails['omniauth_auto_link_user'] = ['openid_connect']
+gitlab_rails['omniauth_providers'] = [
+  {
+    name: "openid_connect",
+    label: "Authentik",
+    icon: "https://avatars.githubusercontent.com/u/82976448?s=200&v=4",
+    args: {
+      name: "openid_connect",
+      scope: ["openid","profile","email"],
+      response_type: "code",
+      issuer: "<< authentik_url >>/application/o/<< authentik_slug >>/",
+      discovery: true,
+      client_auth_method: "query",
+      uid_field: "email",
+      send_scope_to_token_endpoint: "false",
+      pkce: true,
+      client_options: {
+        identifier: "<< authentik_client_id >>",
+        secret: "<< authentik_client_secret >>",
+        redirect_uri: "<< external_url >>/users/auth/openid_connect/callback"
+      }
+    }
+  }
+]
+<%- endif %>
+
+<%- if email_enabled %>
+# SMTP settings
+gitlab_rails['smtp_enable']           = true
+gitlab_rails['smtp_address']          = "<< email_host >>"
+gitlab_rails['smtp_port']             = << email_port >>
+gitlab_rails['smtp_user_name']        = "<< email_username >>"
+gitlab_rails['smtp_password']         = "<< email_password >>"
+gitlab_rails['smtp_authentication']   = "login"
+<%- if email_use_ssl %>
+gitlab_rails['smtp_ssl']              = true
+gitlab_rails['smtp_force_ssl']        = true
+<%- elif email_use_tls %>
+gitlab_rails['smtp_tls']              = true
+<%- endif %>
+gitlab_rails['gitlab_email_from']     = '<< email_from >>'
+gitlab_rails['gitlab_email_reply_to'] = '<< email_from >>'
+<%- endif %>
+
+<%- if performance_preset == 'homelab' %>
+# Performance optimizations for homelab/low-resource environments
+# NOTE: These settings reduce resource usage but may impact performance under high load
+postgresql['shared_buffers'] = "256MB"
+sidekiq['max_concurrency'] = 4
+sidekiq['concurrency'] = 1
+puma['worker_timeout'] = 120
+puma['worker_processes'] = 1
+<%- endif %>
+
+# Prometheus monitoring
+prometheus_monitoring['enable'] = << prometheus_enabled | lower >>
+
+# Default UI settings
+gitlab_rails['gitlab_default_theme'] = << default_theme >>
+gitlab_rails['gitlab_default_color_mode'] = << default_color_mode >>
+
+# Product usage data
+gitlab_rails['initial_gitlab_product_usage_data'] = <%- if disable_usage_data %>false<%- else %>true<%- endif %>