add nginx.conf config (not packaged altho)

diff --git a/gitlab-ce.spec b/gitlab-ce.spec
index 9a7111acef886c10efbbe56eedcf19b8082554ce..575ec40b85653d57754c91ee13e4e8593e513550 100644 (file)
--- a/gitlab-ce.spec
+++ b/gitlab-ce.spec
@@ -34,6 +34,7 @@ Source9:      gitlab-rake.sh
 Source10:      gitconfig
 Source11:      gitlab-ctl.sh
 Source12:      clean-vendor.sh
+Source13:      nginx.conf
 Patch0:                3774.patch
 Patch1:                pld.patch
 URL:           https://www.gitlab.com/gitlab-ce/

diff --git a/nginx.conf b/nginx.conf
new file mode 100644 (file)
index 0000000..21e7056
--- /dev/null
+++ b/nginx.conf
@@ -0,0 +1,59 @@
+## GitLab
+##
+## Lines starting with two hashes (##) are comments with information.
+## Lines starting with one hash (#) are configuration parameters that can be uncommented.
+##
+###################################
+##         configuration         ##
+###################################
+
+upstream gitlab-workhorse {
+       server unix:/run/gitlab/gitlab-workhorse.socket;
+}
+
+server {
+       listen *:80;
+
+       server_name gitlab.example.org;
+
+       ## Don't show the nginx version number, a security best practice
+       server_tokens off;
+
+       ## Increase this if you want to upload large attachments
+       ## Or if you want to accept large git objects over http
+       client_max_body_size 0;
+
+       ## Individual nginx logs for this GitLab vhost
+       access_log  /var/log/nginx/gitlab_access.log gitlab_access;
+       error_log   /var/log/nginx/gitlab_error.log;
+
+       location / {
+               ## If you use HTTPS make sure you disable gzip compression
+               ## to be safe against BREACH attack.
+
+               ## https://github.com/gitlabhq/gitlabhq/issues/694
+               ## Some requests take more than 30 seconds.
+               proxy_read_timeout      300;
+               proxy_connect_timeout   300;
+               proxy_redirect          off;
+
+               proxy_http_version 1.1;
+
+               proxy_set_header Host $http_host;
+               proxy_set_header X-Real-IP $remote_addr;
+               proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+               proxy_set_header X-Forwarded-Proto http;
+
+               proxy_pass http://gitlab-workhorse;
+       }
+
+       error_page 404 /404.html;
+       error_page 422 /422.html;
+       error_page 500 /500.html;
+       error_page 502 /502.html;
+
+       location ~ ^/(404|422|500|502)\.html$ {
+               root /var/lib/gitlab/public;
+               internal;
+       }
+}