Hekenga o GitLab pātengi raraunga ki waho PostgreSQL

Всем Привет!

I roto i tenei tuhinga, ka nukuhia e matou te patengi raraunga GitLab mai i te PostgreSQL o roto, kua whakauruhia ki a GitLab, ki te PostgreSQL o waho, kua whakauruhia ki runga i tetahi atu tūmau.

FAKATOKANGA
Ka whakamanahia nga mahi katoa ki runga i te CentOS 7.7.1908, PostgreSQL 12 me GitLab 12.4.2-ee.0.

Te whakarite i te timatanga

Me mahi e toru nga mea i mua:

1. I runga i te tūmau PostgreSQL, tāpirihia he ture ki te pātūahi e taea ai ngā hononga taumai ki te tauranga PostgreSQL 5432/TCP.

I taku take:

firewall-cmd --add-service=postgresql --zone=internal --permanent
success
firewall-cmd --reload
success

2. I te waahi ano, engari i roto i te konae postgresql.conf, tukua te atanga whatunga ki te whakaae ki nga hononga taumai mai i waho. Whakatuwheratia te konae postgresql.conf, kimihia te rarangi korero "#listen_addresses = 'localhost'" a ki raro ka taapirihia he raina penei i raro nei. Kei hea - 10.0.0.2, te wahitau o to atanga.

I taku take:

vi /var/lib/pgsql/12/data/postgresql.conf
# - Connection Settings -

#listen_addresses = 'localhost'         # what IP address(es) to listen on;
listen_addresses = 'localhost, 10.0.0.2'
                                        # comma-separated list of addresses;

3. I te mea ka hono te tūmau GitLab ki tētahi pātengi raraunga o waho, me whakaae tēnei ki te tūmau PostgreSQL i roto i te kōnae pg_hba.conf. Ko taku wahitau tūmau GitLab ko 10.0.0.4.

Me whakatuwhera te pg_hba.conf kōnae ka taapirihia te raina ki reira:

host    all             gitlab               10.0.0.4/24             md5

Ka penei te ahua:

# TYPE  DATABASE        USER            ADDRESS                 METHOD

# "local" is for Unix domain socket connections only
local   all             postgres                                     md5

# IPv4 local connections:
host    all             postgres             127.0.0.1/32            md5
host    all             gitlab               10.0.0.4/24             md5

Ka mutu, ka whakaara ano i te ratonga postgresql:

systemctl restart postgresql-12.service

Te kaweake i te patengi raraunga GitLab

Me mahi he tārua pātengi raraunga i runga i te tūmau GitLab:

sudo -u gitlab-psql /opt/gitlab/embedded/bin/pg_dumpall -U gitlab-psql --host=/var/opt/gitlab/postgresql > /tmp/internal-gitlab.sql

I puta te tārua i /tmp:

ls -lh
total 836K
-rw-r--r--. 1 root root 836K Nov 18 12:59 internal-gitlab.sql

Me kape tenei kape ki te tūmau PostgreSQL:

scp /tmp/internal-gitlab.sql 10.0.0.2:/tmp/
internal-gitlab.sql                                                                               100%  835KB  50.0MB/s   00:00

Kawemai "internal-gitlab.sql" ki PostgreSQL

Kawemai te pātengi raraunga ki PostgreSQL:

sudo -u postgres psql -f /tmp/internal-gitlab.sql

Tirohia kei te PostgreSQL te pātengi raraunga ināianei:

sudo -u postgres psql -l

Me puta te rarangi e whai ake nei:

gitlabhq_production | gitlab   | UTF8     | en_US.UTF-8 | en_US.UTF-8 |

Whirihorahia ana a GitLab

Whai muri i te kawemai i te papaaarangi ki PostgreSQL, i hangaia he kaiwhakamahi gitlab. Me huri e koe te kupuhipa o tenei kaiwhakamahi.

Te huri i te kupuhipa:

sudo -u postgres psql -c "ALTER USER gitlab ENCRYPTED PASSWORD 'ПАРОЛЬ' VALID UNTIL 'infinity';"
Password for user postgres:
ALTER ROLE

Na, i runga i te tūmau GitLab, i roto i te kōnae whirihoranga /etc/gitlab/gitlab.rb, ka tohuhia e matou nga raraunga katoa o te PostgreSQL o waho.

Me hanga he kape taapiri o te konae gitlab.rb:

cp /etc/gitlab/gitlab.rb /etc/gitlab/gitlab.rb.orig

Taapirihia enei rarangi ki te mutunga o te konae gitlab.rb:

# Отключить встроенный PostgreSQL.
postgresql['enable'] = false

# Данные для подключения к внешней базе. Указывайте свои.
gitlab_rails['db_adapter'] = 'postgresql'
gitlab_rails['db_encoding'] = 'utf8'
gitlab_rails['db_host'] = '10.0.0.2'
gitlab_rails['db_port'] = 5432
gitlab_rails['db_database'] = "gitlabhq_production"
gitlab_rails['db_username'] = 'gitlab'
gitlab_rails['db_password'] = '******'

Tiakina te konae /etc/gitlab/gitlab.rb ka whirihora ano i a GitLab:

gitlab-ctl reconfigure && gitlab-ctl restart

Heoi ano :)

Tono nui. Mena ka hoatu he iti, tuhia te take ki nga korero.

Source: will.com