Skip to content

Instantly share code, notes, and snippets.

@megamorf
Last active February 21, 2016 17:37
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save megamorf/c7d36fac6a433e2e512c to your computer and use it in GitHub Desktop.
Save megamorf/c7d36fac6a433e2e512c to your computer and use it in GitHub Desktop.
Gitlab Web Server Configuration
external_url 'https://git.mydomain.internal'
nginx['enable'] = true
nginx['client_max_body_size'] = '250m'
nginx['redirect_http_to_https'] = true
nginx['ssl_certificate'] = "/etc/gitlab/ssl/git.mydomain.internal.crt"
nginx['ssl_certificate_key'] = "/etc/gitlab/ssl/git.mydomain.internal.key"
nginx['ssl_ciphers'] = "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256"
nginx['ssl_prefer_server_ciphers'] = "on"
nginx['ssl_protocols'] = "TLSv1 TLSv1.1 TLSv1.2" # recommended by https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html & https://cipherli.st/
nginx['ssl_session_cache'] = "builtin:1000 shared:SSL:10m" # recommended in http://nginx.org/en/docs/http/ngx_http_ssl_module.html
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment