[Gitlab运维系列]Gitlab 403 forbidden 并发引起IP被封

问题

原因

rack_attack

解决方案

/etc/gitlab/gitlab.rb

gitlab_rails['rack_attack_git_basic_auth']

ip_whitelist

gitlab_rails['rack_attack_git_basic_auth'] = {
'enabled' => true,
'ip_whitelist' => ["192.168.11.157","Gitlab部署的IP地址"],
'maxretry' => 300,
'findtime' => 5,
'bantime' => 60
}

gitlab-ctl reconfigure

git 创建后想要项目地址是域名，那么修改如下配置

vim /opt/gitlab/embedded/service/gitlab-rails/config/gitlab.yml

## GitLab settings
gitlab:
## Web server settings (note: host is the FQDN, do not include http://) host: localhost         >> 这里改为主机的IP 或域名即可
port: 80
https: false

# Uncommment this line below if your ssh host is different from HTTP/HTTPS one
# (you'd obviously need to replace ssh.host_example.com with your own host).
# Otherwise, ssh host will be set to the `host:` value above