gitlab添加http協議修改https

1.修改配置文件

       vi /etc/gitlab/gitlab.rb

　　1.1.external_url    http屬性修改為https:

        external_url 'https://ip:port'

       1.2.nginx配置這幾個參數設置為

      nginx['redirect_http_to_https'] =true

      nginx['ssl_certificate'] = "/etc/gitlab/ssl/server.crt"

      nginx['ssl_certificate_key'] = "/etc/gitlab/ssl/server.key"

 

2.生成秘鑰與證書

   

 #秘鑰腳本，將以下內容保存為shell腳本，然后運行
 #出現提示輸入信息的地方輸入信息，先輸入域名然后4次證書密碼，任意密碼，四次保持一致。

 #!/bin/sh

 # create self-signed server certificate:
 
 read -p "Enter your domain [192.168.79.128]: " DOMAIN
 
 echo "Create server key..."
 
 openssl genrsa -des3 -out $DOMAIN.key 1024
 
 echo "Create server certificate signing request..."
 
 SUBJECT="/C=US/ST=Mars/L=iTranswarp/O=iTranswarp/OU=iTranswarp/CN=$DOMAIN"
 
 openssl req -new -subj $SUBJECT -key $DOMAIN.key -out $DOMAIN.csr
 
 echo "Remove password..."
 
 mv $DOMAIN.key $DOMAIN.origin.key
 openssl rsa -in $DOMAIN.origin.key -out $DOMAIN.key
 
 echo "Sign SSL certificate..."
 
 openssl x509 -req -days 3650 -in $DOMAIN.csr -signkey $DOMAIN.key -out $DOMAIN.crt
 
 echo "TODO:"
 echo "Copy $DOMAIN.crt to /etc/nginx/ssl/$DOMAIN.crt"
 echo "Copy $DOMAIN.key to /etc/nginx/ssl/$DOMAIN.key"
 echo "Add configuration in nginx:"
 echo "server {"
 echo "    ..."
 echo "    listen 443 ssl;"
 echo "    ssl_certificate     /etc/nginx/ssl/$DOMAIN.crt;"
 echo "    ssl_certificate_key /etc/nginx/ssl/$DOMAIN.key;"
 echo "}"

執行成功后生成文件如下：

 

移動到gitlab相應的位置

sudo mkdir -p /etc/gitlab/ssl

sudo chmod 700 /etc/gitlab/ssl/ -R

sudo cp 192.168.79.128.crt /etc/gitlab/ssl/server.crt

sudo cp 192.168.79.128.key /etc/gitlab/ssl/server.key

 

准備完畢,gitlab配置重啟

gitlab-ctl reconfigure

gitlab-ctl restart

 

登錄地址:https://192.168.79.128:8989/

如下圖:

 

 原來的http服務將訪問不了,如圖: