如何為 GitLab NixOS 服務配置主機名？

December 23, 2021

我正在嘗試在 NixOS 20.09.1632.a6a3a368dda (Nightingale) 上部署一個新的 GitLab 實例。

我有這個相當小的configuration.nix：

{ modulesPath, ... }:
let
 host = "example.org";
 adminEmail = "admin@example.org";
in
{
 imports = [ "${modulesPath}/virtualisation/amazon-image.nix" ];
 ec2.hvm = true;

 services.gitlab = rec {
   enable = true;

   inherit host;
   port = 80;

   # You, dear sysadmin, have to make these files exist.
   initialRootPasswordFile = "/tmp/gitlab-secrets/initial-password";

   secrets = rec {
     # A file containing 30 "0" characters.
     secretFile = "/tmp/gitlab-secrets/zeros";
     dbFile = secretFile;
     otpFile = secretFile;
     # openssl genrsa 2048 &gt; jws.rsa
     jwsFile = "/tmp/gitlab-secrets/jws.rsa";
   };
 };

 services.nginx = {
   enable = true;
   user = "gitlab";
   virtualHosts = {
     "${host}" = {
       locations."/" = {
         # http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_pass
         proxyPass = "http://unix:/var/gitlab/state/tmp/sockets/gitlab.socket";
       };
     };
   };
 };

 networking.firewall = {
   enable = true;
   allowPing = false;
   allowedTCPPorts = [
     22
     80
   ];
 };
}

啟動此配置時，會啟動許多程序（redis、postgresql、sidekiq 等）。然而，nginx（感謝，我假設，GitLab 的 Rails HTTP 伺服器）用以下方式響應請求/：

* Connected to example.org (X.X.X.X) port 80 (#0)
> GET / HTTP/1.1
> Host: example.org
> User-Agent: curl/7.72.0
> Accept: */*
> 
* Mark bundle as not supporting multiuse
&lt; HTTP/1.1 302 Found
&lt; Server: nginx
&lt; Date: Thu, 11 Feb 2021 19:38:40 GMT
&lt; Content-Type: text/html; charset=utf-8
&lt; Transfer-Encoding: chunked
&lt; Connection: keep-alive
&lt; X-Frame-Options: DENY
&lt; X-XSS-Protection: 1; mode=block
&lt; X-Content-Type-Options: nosniff
&lt; X-Download-Options: noopen
&lt; X-Permitted-Cross-Domain-Policies: none
&lt; Referrer-Policy: strict-origin-when-cross-origin
&lt; X-UA-Compatible: IE=edge
&lt; Location: http://localhost/users/sign_in
&lt; Cache-Control: no-cache
&lt; Set-Cookie: experimentation_subject_id=eyJfcmFpbHMiOnsibWVzc2FnZSI6IklqZGhabU0zWXpVNExUSmxNR1F0TkdZMlpTMWlZVEkwTFdKak1EVTFaREZoTURJd1ppST0iLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5leHBlcmltZW50YXRpb25fc3ViamVjdF9pZCJ9fQ%3D%3D--cbf53392028ed41f7c582a64e643476a5c2aab6b; path=/; expires=Mon, 11 Feb 2041 19:38:40 -0000; HttpOnly
&lt; X-Request-Id: 545cc04e-1689-4351-b5a9-ca171f1a85d4
&lt; X-Runtime: 0.060596
&lt; 
* Connection #0 to host example.org left intact
&lt;html&gt;&lt;body&gt;You are being &lt;a href="http://localhost/users/sign_in"&gt;redirected&lt;/a&gt;.&lt;/body&gt;&lt;/html&gt;

由於localhostis not example.org，因此失敗。

如何配置 GitLab 以了解其自己的主機名？

proxy_set_header 使用NGINX 指令可以實現所需的行為：
proxy_set_header Host       $host;
如果你在反向代理配置中包含這一行，NGINX 將localhost使用原始請求中的主機名（即）重寫從上游伺服器（即 GitLab）發回的主機頭（即example.org）。services.nginx.recommendedProxySettings在 NixOS 中啟用該選項將生成包含該指令的 NGINX 配置。

引用自：https://serverfault.com/questions/1053319

如何為 GitLab NixOS 服務配置主機名？

相關問答

NixOS 可重現的使用者和軟體包？

如何在專用網路的 gitlab 中禁用電子郵件確認

在 Apache 下啟動 Rails 伺服器之前執行命令

無法使用Passenger + Rails 配置Apache

在 Debian 6.0.5 上安裝 gitlab

在未知配置的伺服器上部署 Rails 和 PHP 應用程序