Mbugharị nke GitLab nchekwa data gaa na PostgreSQL mpụga

Ndewo onye ọ bụla!

N'isiokwu a, anyị ga-akwaga GitLab nchekwa data site na ime PostgreSQL, nke etinyere na GitLab, gaa na PostgreSQL dị na mpụga, nke arụnyere na nkesa ọzọ.

Mbugharị nke GitLab nchekwa data gaa na PostgreSQL mpụga

MARA
A na-ekwe nkwa na ihe omume niile ga-arụ ọrụ na ya CentOS 7.7.1908, PostgreSQL 12 na GitLab 12.4.2-ee.0.

Nkwadebe nke mbu

Ka anyị mee ihe atọ n'ihu:

1. Gbanye ihe nkesa Tinye iwu na firewall PostgreSQL nke na-enye ohere njikọ na-abata na ọdụ ụgbọ mmiri PostgreSQL 5432/TCP.

N'ọnọdụ m:

firewall-cmd --add-service=postgresql --zone=internal --permanent
success
firewall-cmd --reload
success

2. N'otu ebe, ma na postgresql.conf faịlụ, ekwe ka netwọk interface nabata njikọ si n'èzí. Mepee faịlụ postgresql.conf, chọta ahịrị ekwuputara "# listen_addresses = 'localhost'" na n'okpuru ya tinye ahịrị dị ka n'okpuru. Ebe - 10.0.0.2, adreesị nke interface gị.

N'ọnọdụ m:

vi /var/lib/pgsql/12/data/postgresql.conf
# - Connection Settings -

#listen_addresses = 'localhost'         # what IP address(es) to listen on;
listen_addresses = 'localhost, 10.0.0.2'
                                        # comma-separated list of addresses;

3. Ebe ọ bụ na ihe nkesa GitLab ga-ejikọ na nchekwa data mpụga, mgbe ahụ ihe nkesa A chọrọ ka PostgreSQL rụọ ọrụ na faịlụ pg_hba.conf. Adreesị sava GitLab m bụ 10.0.0.4.

Ka anyị mepee pg_hba.conf faịlụ wee tinye ahịrị ebe ahụ:

host    all             gitlab               10.0.0.4/24             md5

Ọ ga-adị ka nke a:

# TYPE  DATABASE        USER            ADDRESS                 METHOD

# "local" is for Unix domain socket connections only
local   all             postgres                                     md5

# IPv4 local connections:
host    all             postgres             127.0.0.1/32            md5
host    all             gitlab               10.0.0.4/24             md5

N'ikpeazụ, anyị maliteghachiri ọrụ postgresql:

systemctl restart postgresql-12.service

Na-ebupụ nchekwa data GitLab

Ka anyị mee nkwado ndabere data na sava GitLab:

sudo -u gitlab-psql /opt/gitlab/embedded/bin/pg_dumpall -U gitlab-psql --host=/var/opt/gitlab/postgresql > /tmp/internal-gitlab.sql

Ndabere ahụ pụtara na /tmp:

ls -lh
total 836K
-rw-r--r--. 1 root root 836K Nov 18 12:59 internal-gitlab.sql

Ka anyị detuo otu a na sava PostgreSQL:

scp /tmp/internal-gitlab.sql 10.0.0.2:/tmp/
internal-gitlab.sql                                                                               100%  835KB  50.0MB/s   00:00

Na-ebubata "internal-gitlab.sql" na PostgreSQL

Bubata nchekwa data na PostgreSQL:

sudo -u postgres psql -f /tmp/internal-gitlab.sql

Lelee na nchekwa data dị ugbu a na PostgreSQL:

sudo -u postgres psql -l

Ahịrị ndị a kwesịrị ịpụta:

gitlabhq_production | gitlab   | UTF8     | en_US.UTF-8 | en_US.UTF-8 |

Na-ahazi GitLab

Mgbe ibubata nchekwa data na PostgreSQL, emepụtara onye ọrụ gitlab. Ịkwesịrị ịgbanwe paswọọdụ onye ọrụ a.

Ịgbanwe paswọọdụ:

sudo -u postgres psql -c "ALTER USER gitlab ENCRYPTED PASSWORD 'ПАРОЛЬ' VALID UNTIL 'infinity';"
Password for user postgres:
ALTER ROLE

Mgbe ahụ, na ihe nkesa GitLab, na faịlụ nhazi /etc/gitlab/gitlab.rb, anyị ga-egosi data niile nke PostgreSQL dị na mpụga.

Ka anyị mee nnomi nke faịlụ gitlab.rb:

cp /etc/gitlab/gitlab.rb /etc/gitlab/gitlab.rb.orig

Ugbu a tinye ahịrị ndị a na njedebe nke faịlụ gitlab.rb:

# Отключить встроенный PostgreSQL.
postgresql['enable'] = false

# Данные для подключения к внешней базе. Указывайте свои.
gitlab_rails['db_adapter'] = 'postgresql'
gitlab_rails['db_encoding'] = 'utf8'
gitlab_rails['db_host'] = '10.0.0.2'
gitlab_rails['db_port'] = 5432
gitlab_rails['db_database'] = "gitlabhq_production"
gitlab_rails['db_username'] = 'gitlab'
gitlab_rails['db_password'] = '******'

Chekwaa faịlụ /etc/gitlab/gitlab.rb wee hazie GitLab:

gitlab-ctl reconfigure && gitlab-ctl restart

Ọ gwụla :)

Nnukwu arịrịọ. Ọ bụrụ na i tinye mwepu, dee ihe kpatara ya na nkwupụta.

isi: www.habr.com

Zụta nnabata ntụkwasị obi maka saịtị nwere nchekwa DDoS, sava VPS VDS 🔥 Zụta ebe nrụọrụ weebụ a pụrụ ịtụkwasị obi na nchekwa DDoS, sava VPS VDS | ProHoster