Omnibus 7.10.0 Gitlab将https重定向到http

Question

https://mydomainName.com --> AWS-ELB [ingress 443 --> egress 80]) --> OmnibusGitlab

现在，Omnibus重定向到以下内容并超时

http://mydomainName.com/users/sign_in

任何调试此问题的方法。

Answer 1

完整路径必须为https，因为如果您要通过接受https和的反向代理进行转发，则必须返回为https。

分离nginx配置，因为Omnibus解决方案必须限制我们在标准Nginx上拥有的灵活性。要进行此更改，请执行以下操作：

edit /etc/gitlab/gitlab.rb 

并添加

 nginx['enable'] = false
 web_server['external_users'] = ['www-data'] #for ubuntu nginx user
 web_server['external_users'] = ['nginx']   # for centos 6-7

添加以下配置，通过简单的nginx /etc/nginx/site-availabe/server启用gitlab

server {
  listen *:443 default_server ssl;
  ssl_certificate /etc/ssl/certs/myserver.crt;
  ssl_certificate_key /etc/ssl/private/myserver.key;
  server_name myhostname.com
  server_tokens off;
  root /opt/gitlab/embedded/service/gitlab-rails/public;
  client_max_body_size 50m; #or 5000 
  access_log  /var/log/gitlab/nginx_access.log;
  error_log   /var/log/gitlab/nginx_error.log;
location / {
  try_files $uri $uri/index.html $uri.html @gitlab;
}
location @gitlab {
  proxy_read_timeout 300; # Some requests take more than 30 seconds.
  proxy_connect_timeout 300; # Some requests take more than 30 seconds.
  proxy_redirect     off;
  proxy_set_header   X-Forwarded-Proto $scheme;
  proxy_set_header   Host              $http_host;
  proxy_set_header   X-Real-IP         $remote_addr;
  proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
  proxy_pass http://gitlab;
}
error_page 502 /502.html;
}

gitlab-重定向

/etc/nginx/sites-available/gitlab-redirect 
server {
listen  80;
server_name myhostname.com;
return 301 https://myhostname.com;
}