gitlab.rb

# Change the external_url to the address your users will type in their browser
external_url 'http://code.domain.com'
git_data_dir '/opt/git/'
default_can_create_group false
username_changing_enabled false
signup_enabled false
gitlab_rails['extra_google_analystics_id'] = 'id'

# LDAP Auth
gitlab_rails['ldap_enabled'] = true
gitlab_rails['ldap_host'] = 'identity.domain.com'
gitlab_rails['ldap_port'] = 389
gitlab_rails['ldap_uid'] = 'uid'
gitlab_rails['ldap_method'] = 'plain'
gitlab_rails['ldap_allow_username_or_email_login'] = true
gitlab_rails['ldap_base'] = 'cn=users,cn=accounts,dc=domain,dc=com'
gitlab_rails['ldap_group_base'] = 'cn=groups,cn=accounts,dc=domain,dc=com'
gitlab_rails['ldap_active_directory'] = false
gitlab_rails['ldap_sync_ssh_keys'] = 'ipaSshPubKey'

# MariaSQL
postgresql['enable'] = false
gitlab_rails['db_adapter'] = 'mysql2'
gitlab_rails['db_encoding'] = 'utf8'
gitlab_rails['db_host'] = 'db.domain.com'
gitlab_rails['db_port'] = '3306'
gitlab_rails['db_username'] = 'gitlab'
gitlab_rails['db_password'] = 'password'

svc_gitlab.rb

class svc_gitlab {
        package { ['openssh-server', 'postfix', 'gitlab']:
                ensure          => installed
        }
        ->
        file { '/etc/gitlab/gitlab.rb':
                ensure          => file,
                owner           => 'root',
                group           => 'root',
                mode            => 600,
                source          => 'puppet:///resources/gitlab.rb'
        }
        ->
        exec { 'configure gitlab':
                command         => '/usr/bin/gitlab-ctl reconfigure'
        }
        ->
        firewalld::zone { "public":
                services        => ["ssh", "dhcpv6-client"],
                ports           => [{
                                port            => "80",
                                protocol        => "tcp"
                }]
        }
        ->
        service { ['sshd', 'postfix', 'gitlab-runsvdir']:
                ensure          => running
        }
}