alias

2025-07-01 16:08:32 +02:00 · 2025-03-23 16:24:50 +01:00
parent 54149deda8
commit 49aaf5bb25
31 changed files with 1558 additions and 1721 deletions
--- a/gitlab/docker-compose.yml
+++ b/gitlab/docker-compose.yml
@ -1,70 +1,53 @@
-version: '3.6'
-
 services:
  web:
-    image: '${DOCKER_REGISTRY:-}gitlab/gitlab-ce:latest'
    container_name: gitlab
-    restart:  unless-stopped
-    network_mode: bridge
    environment:
-      TZ: "Europe/Bratislava" 
-      GITLAB_OMNIBUS_CONFIG: |
-        external_url 'https://gitlab.sectorq.eu'
-        nginx['listen_port'] = 80
-        nginx['listen_https'] = false
-        web_server['username'] = 'git'
-        gitlab_rails['time_zone'] = 'Europe/Bratislava'
-        gitlab_rails['omniauth_enabled'] = true
-        gitlab_rails['omniauth_allow_single_sign_on'] = ['saml']
-        gitlab_rails['omniauth_sync_email_from_provider'] = 'saml'
-        gitlab_rails['omniauth_sync_profile_from_provider'] = ['saml']
-        gitlab_rails['omniauth_sync_profile_attributes'] = ['email']
-        gitlab_rails['omniauth_auto_sign_in_with_provider'] = 'saml'
-        gitlab_rails['omniauth_block_auto_created_users'] = false
-        gitlab_rails['omniauth_auto_link_saml_user'] = true
-        gitlab_rails['omniauth_providers'] = [
-          {
-            name: 'saml',
-            args: {
-              assertion_consumer_service_url: 'https://gitlab.sectorq.eu/users/auth/saml/callback',
-              # Shown when navigating to certificates in authentik1
-              idp_cert_fingerprint: 'f7:fd:49:03:b3:38:52:b3:23:f5:43:c4:8d:08:65:32:e0:5a:7b:0e',
-              idp_sso_target_url: 'https://auth.sectorq.eu/application/saml/gitlab/sso/binding/redirect/',
-              issuer: 'https://gitlab.sectorq.eu',
-              name_identifier_format: 'urn:oasis:names:tc:SAML:2.0:nameid-format:persistent',
-              attribute_statements: {
-                email: ['http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress'],
-                first_name: ['http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name'],
-                nickname: ['http://schemas.goauthentik.io/2021/02/saml/username']
-              }
-            },
-            label: 'authentik'
-          }
-        ]
-
-        
-    hostname: 'gitlab.sectorq.eu'
-    ports:
-      - '8780:80'
-      - '8743:443'
-      - '8722:22'
-    volumes:
-      - '/share/docker_data/gitlab/config:/etc/gitlab'
-      - '/share/docker_data/gitlab/logs:/var/log/gitlab'
-      - '/share/docker_data/gitlab/data:/var/opt/gitlab'
-      - '/etc/localtime:/etc/localtime:ro'
-    shm_size: '4gb'
+      GITLAB_OMNIBUS_CONFIG: "external_url 'https://gitlab.sectorq.eu'\nnginx['listen_port']\
+        \ = 80\nnginx['listen_https'] = false\nweb_server['username'] = 'git'\ngitlab_rails['time_zone']\
+        \ = 'Europe/Bratislava'\ngitlab_rails['omniauth_enabled'] = true\ngitlab_rails['omniauth_allow_single_sign_on']\
+        \ = ['saml']\ngitlab_rails['omniauth_sync_email_from_provider'] = 'saml'\n\
+        gitlab_rails['omniauth_sync_profile_from_provider'] = ['saml']\ngitlab_rails['omniauth_sync_profile_attributes']\
+        \ = ['email']\ngitlab_rails['omniauth_auto_sign_in_with_provider'] = 'saml'\n\
+        gitlab_rails['omniauth_block_auto_created_users'] = false\ngitlab_rails['omniauth_auto_link_saml_user']\
+        \ = true\ngitlab_rails['omniauth_providers'] = [\n  {\n    name: 'saml',\n\
+        \    args: {\n      assertion_consumer_service_url: 'https://gitlab.sectorq.eu/users/auth/saml/callback',\n\
+        \      # Shown when navigating to certificates in authentik1\n      idp_cert_fingerprint:\
+        \ 'f7:fd:49:03:b3:38:52:b3:23:f5:43:c4:8d:08:65:32:e0:5a:7b:0e',\n      idp_sso_target_url:\
+        \ 'https://auth.sectorq.eu/application/saml/gitlab/sso/binding/redirect/',\n\
+        \      issuer: 'https://gitlab.sectorq.eu',\n      name_identifier_format:\
+        \ 'urn:oasis:names:tc:SAML:2.0:nameid-format:persistent',\n      attribute_statements:\
+        \ {\n        email: ['http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress'],\n\
+        \        first_name: ['http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name'],\n\
+        \        nickname: ['http://schemas.goauthentik.io/2021/02/saml/username']\n\
+        \      }\n    },\n    label: 'authentik'\n  }\n]\n"
+      TZ: Europe/Bratislava
+    hostname: gitlab.sectorq.eu
+    image: ${DOCKER_REGISTRY:-}gitlab/gitlab-ce:latest
    labels:
-      - com.centurylinklabs.watchtower.enable=true
-      - homepage.group=Infrastructure
-      - homepage.name=Gitlab
-      - homepage.weight=1
-      - homepage.icon=gitlab.png
-      - homepage.href=https://gitlab.sectorq.eu
-      - homepage.description=Version control
-      - homepage.server=my-docker
-      - homepage.container=gitlab
-      - homepage.widget.type=gitlab
-      - homepage.widget.url=https://gitlab.sectorq.eu
-      - homepage.widget.key=glpat-BuMKcaDqeD-Wx3dW4TM9
-      - homepage.widget.user_id=2
+      com.centurylinklabs.watchtower.enable: 'true'
+      homepage.container: gitlab
+      homepage.description: Version control
+      homepage.group: Infrastructure
+      homepage.href: https://gitlab.sectorq.eu
+      homepage.icon: gitlab.png
+      homepage.name: Gitlab
+      homepage.server: my-docker
+      homepage.weight: '1'
+      homepage.widget.key: glpat-BuMKcaDqeD-Wx3dW4TM9
+      homepage.widget.type: gitlab
+      homepage.widget.url: https://gitlab.sectorq.eu
+      homepage.widget.user_id: '2'
+      wud.watch.digest: true
+    network_mode: bridge
+    ports:
+    - 8780:80
+    - 8743:443
+    - '8722:22'
+    restart: unless-stopped
+    shm_size: 4gb
+    volumes:
+    - /share/docker_data/gitlab/config:/etc/gitlab
+    - /share/docker_data/gitlab/logs:/var/log/gitlab
+    - /share/docker_data/gitlab/data:/var/opt/gitlab
+    - /etc/localtime:/etc/localtime:ro
+version: '3.6'