Created
December 27, 2013 23:23
-
-
Save gregbuehler/8154032 to your computer and use it in GitHub Desktop.
nginx config for gitlab
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
upstream gitlab { | |
server unix:/home/git/gitlab/tmp/sockets/gitlab.socket; | |
} | |
# This is a normal HTTP host which redirects all traffic to the HTTPS host. | |
# Replace git.example.com with your FQDN. | |
server { | |
listen *:80; | |
server_name gitlab.example.com gitlab; | |
server_tokens off; | |
root /nowhere; # this doesn't have to be a valid path since we are redirecting, you don't have to change it. | |
rewrite ^ https://$server_name$request_uri permanent; | |
} | |
server { | |
listen 443 ssl; | |
server_name gitlab.example.com vplitgitlab.example.com vplitgitlab gitlab; | |
server_tokens off; | |
root /home/git/gitlab/public; | |
ssl on; | |
ssl_certificate /etc/nginx/gitlab.example.com.crt; | |
ssl_certificate_key /etc/nginx/gitlab.example.com.key; | |
ssl_protocols SSLv3 TLSv1 TLSv1.2; | |
ssl_ciphers AES:HIGH:!ADH:!MD5; | |
ssl_prefer_server_ciphers on; | |
# individual nginx logs for this gitlab vhost | |
access_log /var/log/nginx/gitlab_access.log; | |
error_log /var/log/nginx/gitlab_error.log; | |
location / { | |
# serve static files from defined root folder;. | |
# @gitlab is a named location for the upstream fallback, see below | |
try_files $uri $uri/index.html $uri.html @gitlab; | |
} | |
# if a file, which is not found in the root folder is requested, | |
# then the proxy pass the request to the upsteam (gitlab unicorn) | |
location @gitlab { | |
proxy_read_timeout 300; # https://github.com/gitlabhq/gitlabhq/issues/694 | |
proxy_connect_timeout 300; # https://github.com/gitlabhq/gitlabhq/issues/694 | |
proxy_redirect off; | |
proxy_set_header X-Forwarded-Proto https; | |
proxy_set_header X-Forwarded-Ssl on; | |
proxy_set_header Host $http_host; | |
proxy_set_header X-Real-IP $remote_addr; | |
proxy_pass http://gitlab:8080; | |
} | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment