[Ubuntu] GitLab Permission Fixer

gitlab_permissions_fixer.sh

# root:root
sudo chown root:root /var/opt/gitlab
sudo chown root:root /var/opt/gitlab/gitlab-kas/VERSION
sudo chown root:root /var/opt/gitlab/trusted-certs-directory-hash
sudo chown root:root /var/opt/gitlab/postgresql/VERSION
sudo chown root:root /var/opt/gitlab/bootstrapped
sudo chown root:root /var/opt/gitlab/public_attributes.json
sudo chown root:root /var/opt/gitlab/logrotate
sudo chown root:root /var/opt/gitlab/logrotate/logrotate.conf
sudo chown root:root /var/opt/gitlab/logrotate/logrotate.status
sudo chown root:root /var/opt/gitlab/logrotate/logrotate.d
sudo chown root:root /var/opt/gitlab/gitlab-rails/REVISION
sudo chown root:root /var/opt/gitlab/gitlab-rails/VERSION
sudo chown root:root /var/opt/gitlab/gitlab-rails/RUBY_VERSION
sudo chown root:root /var/opt/gitlab/gitaly/VERSION
sudo chown root:root /var/opt/gitlab/gitaly/RUBY_VERSION
sudo chown root:root /var/opt/gitlab/nginx/logs
sudo chown root:root /var/opt/gitlab/nginx/nginx.pid
sudo chown root:root /var/opt/gitlab/gitlab-exporter/RUBY_VERSION
sudo chown root:root /var/opt/gitlab/gitlab-workhorse/VERSION
sudo chown root:root /var/opt/gitlab/node-exporter

sudo chmod 755 /var/opt/gitlab
sudo chmod 644 /var/opt/gitlab/gitlab-kas/VERSION
sudo chmod 644 /var/opt/gitlab/trusted-certs-directory-hash
sudo chmod 644 /var/opt/gitlab/postgresql/VERSION
sudo chmod 600 /var/opt/gitlab/bootstrapped
sudo chmod 644 /var/opt/gitlab/public_attributes.json
sudo chmod 700 /var/opt/gitlab/logrotate
sudo chmod 644 /var/opt/gitlab/logrotate/logrotate.conf
sudo chmod 644 /var/opt/gitlab/logrotate/logrotate.status
sudo chmod 700 /var/opt/gitlab/logrotate/logrotate.d
sudo chmod 644 /var/opt/gitlab/gitlab-rails/REVISION
sudo chmod 644 /var/opt/gitlab/gitlab-rails/VERSION
sudo chmod 644 /var/opt/gitlab/gitlab-rails/RUBY_VERSION
sudo chmod 644 /var/opt/gitlab/gitaly/VERSION
sudo chmod 644 /var/opt/gitlab/gitaly/RUBY_VERSION
sudo chmod 777 /var/opt/gitlab/nginx/logs
sudo chmod 644 /var/opt/gitlab/nginx/nginx.pid
sudo chmod 644 /var/opt/gitlab/gitlab-exporter/RUBY_VERSION
sudo chmod 644 /var/opt/gitlab/gitlab-workhorse/VERSION
sudo chmod 755 /var/opt/gitlab/node-exporter

# root:git*
sudo chown root:git /var/opt/gitlab/gitlab-kas/gitlab-kas-config.yml
sudo chown root:git /var/opt/gitlab/gitlab-kas/authentication_secret_file
sudo chown root:git /var/opt/gitlab/gitlab-kas/private_api_authentication_secret_file
sudo chown root:git /var/opt/gitlab/gitaly/config.toml
sudo chown root:gitlab-www /var/opt/gitlab/nginx
sudo chown root:gitlab-www /var/opt/gitlab/nginx/conf
sudo chown root:git /var/opt/gitlab/gitlab-shell/config.yml
sudo chown root:git /var/opt/gitlab/gitlab-workhorse/config.toml

sudo chmod 640 /var/opt/gitlab/gitlab-kas/gitlab-kas-config.yml
sudo chmod 640 /var/opt/gitlab/gitlab-kas/authentication_secret_file
sudo chmod 640 /var/opt/gitlab/gitlab-kas/private_api_authentication_secret_file
sudo chmod 640 /var/opt/gitlab/gitaly/config.toml
sudo chmod 750 /var/opt/gitlab/nginx
sudo chmod 750 /var/opt/gitlab/nginx/conf
sudo chmod 640 /var/opt/gitlab/gitlab-shell/config.yml
sudo chmod 640 /var/opt/gitlab/gitlab-workhorse/config.toml

# git:git
sudo chmod 644 /var/opt/gitlab/.gitconfig
sudo chmod 700 /var/opt/gitlab/.ssh
sudo chmod 600 /var/opt/gitlab/.ssh/authorized_keys
sudo chmod 750 /var/opt/gitlab/gitlab-rails/sockets
sudo chmod 751 /var/opt/gitlab/gitlab-rails/shared
sudo chmod 700 /var/opt/gitlab/gitlab-rails/uploads
sudo chmod 755 /var/opt/gitlab/gitaly/gitaly.socket
sudo chmod 600 /var/opt/gitlab/gitaly/gitaly.pid
sudo chmod 700 /var/opt/gitlab/gitlab-ci/builds
sudo chmod 755 /var/opt/gitlab/.bundle
sudo chmod 750 /var/opt/gitlab/gitlab-workhorse
sudo chmod 750 /var/opt/gitlab/gitlab-workhorse/sockets
sudo chmod 700 /var/opt/gitlab/git-data
sudo chmod 770 /var/opt/gitlab/git-data/repositories

sudo chown git:git /var/opt/gitlab/.gitconfig
sudo chown git:git /var/opt/gitlab/.ssh
sudo chown git:git /var/opt/gitlab/.ssh/authorized_keys
sudo chown git:gitlab-www /var/opt/gitlab/gitlab-rails/sockets
sudo chown git:gitlab-www /var/opt/gitlab/gitlab-rails/shared
sudo chown git:git /var/opt/gitlab/gitlab-rails/uploads
sudo chown git:git /var/opt/gitlab/gitaly/gitaly.socket
sudo chown git:git /var/opt/gitlab/gitaly/gitaly.pid
sudo chown git:git /var/opt/gitlab/gitlab-ci/builds
sudo chown git:git /var/opt/gitlab/.bundle
sudo chown git:gitlab-www /var/opt/gitlab/gitlab-workhorse
sudo chown git:gitlab-www /var/opt/gitlab/gitlab-workhorse/sockets
sudo chown git:git /var/opt/gitlab/git-data
sudo chown git:git /var/opt/gitlab/git-data/repositories

# the rest
sudo chmod 750 /var/opt/gitlab/alertmanager
sudo chmod 644 /var/opt/gitlab/alertmanager/alertmanager.yml
sudo chmod 700 /var/opt/gitlab/alertmanager/data
sudo chmod 755 /var/opt/gitlab/postgresql
sudo chmod 600 /var/opt/gitlab/postgresql/.s.PGSQL.5432.lock
sudo chmod 777 /var/opt/gitlab/postgresql/.s.PGSQL.5432
sudo chmod 700 /var/opt/gitlab/postgresql/data
sudo chmod 600 /var/opt/gitlab/postgresql/.profile
sudo chmod 700 /var/opt/gitlab/nginx/proxy_cache
sudo chmod 700 /var/opt/gitlab/nginx/proxy_temp
sudo chmod 700 /var/opt/gitlab/nginx/scgi_temp
sudo chmod 700 /var/opt/gitlab/nginx/client_body_temp
sudo chmod 700 /var/opt/gitlab/nginx/uwsgi_temp
sudo chmod 700 /var/opt/gitlab/nginx/fastcgi_temp
sudo chmod 750 /var/opt/gitlab/redis
sudo chmod 644 /var/opt/gitlab/redis/redis.conf
sudo chmod 777 /var/opt/gitlab/redis/redis.socket
sudo chmod 600 /var/opt/gitlab/redis/dump.rdb
sudo chmod 700 /var/opt/gitlab/postgres-exporter
sudo chmod 644 /var/opt/gitlab/postgres-exporter/queries.yaml
sudo chmod 750 /var/opt/gitlab/prometheus
sudo chmod 644 /var/opt/gitlab/prometheus/prometheus.yml
sudo chmod 750 /var/opt/gitlab/prometheus/rules
sudo chmod 700 /var/opt/gitlab/prometheus/data
sudo chmod 755 /var/opt/gitlab/node-exporter/textfile_collector

sudo chown gitlab-prometheus:root /var/opt/gitlab/alertmanager
sudo chown gitlab-prometheus:root /var/opt/gitlab/alertmanager/alertmanager.yml
sudo chown gitlab-prometheus:gitlab-prometheus /var/opt/gitlab/alertmanager/data
sudo chown gitlab-psql:root /var/opt/gitlab/postgresql
sudo chown gitlab-psql:gitlab-psql /var/opt/gitlab/postgresql/.s.PGSQL.5432.lock
sudo chown gitlab-psql:gitlab-psql /var/opt/gitlab/postgresql/.s.PGSQL.5432
sudo chown gitlab-psql:gitlab-psql /var/opt/gitlab/postgresql/data
sudo chown gitlab-psql:root /var/opt/gitlab/postgresql/.profile
sudo chown gitlab-www:root /var/opt/gitlab/nginx/proxy_cache
sudo chown gitlab-www:root /var/opt/gitlab/nginx/proxy_temp
sudo chown gitlab-www:root /var/opt/gitlab/nginx/scgi_temp
sudo chown gitlab-www:root /var/opt/gitlab/nginx/client_body_temp
sudo chown gitlab-www:root /var/opt/gitlab/nginx/uwsgi_temp
sudo chown gitlab-www:root /var/opt/gitlab/nginx/fastcgi_temp
sudo chown gitlab-redis:git /var/opt/gitlab/redis
sudo chown gitlab-redis:root /var/opt/gitlab/redis/redis.conf
sudo chown gitlab-redis:gitlab-redis /var/opt/gitlab/redis/redis.socket
sudo chown gitlab-redis:gitlab-redis /var/opt/gitlab/redis/dump.rdb
sudo chown gitlab-psql:root /var/opt/gitlab/postgres-exporter
sudo chown gitlab-psql:root /var/opt/gitlab/postgres-exporter/queries.yaml
sudo chown gitlab-prometheus:root /var/opt/gitlab/prometheus
sudo chown gitlab-prometheus:root /var/opt/gitlab/prometheus/prometheus.yml
sudo chown gitlab-prometheus:root /var/opt/gitlab/prometheus/rules
sudo chown gitlab-prometheus:gitlab-prometheus /var/opt/gitlab/prometheus/data
sudo chown gitlab-prometheus:root /var/opt/gitlab/node-exporter/textfile_collector

sudo chmod 666 /var/log/gitlab/puma/puma_stdout.log
sudo chown -R git:git /var/opt/gitlab/gitlab-rails
sudo chown git:root /var/opt/gitlab/gitaly
sudo chown git:root /var/opt/gitlab/gitlab-ci
sudo chown git:root /var/opt/gitlab/gitlab-exporter
sudo chown git:root /var/opt/gitlab/gitaly/run
sudo chown git:root /var/opt/gitlab/gitaly


# Run reconfigure a couple of times, trust me it works:
sudo gitlab-ctl reconfigure && sudo gitlab-ctl reconfigure && sudo gitlab-ctl reconfigure && sudo gitlab-ctl reconfigure