1_settings.rb 10.2 KB
Newer Older
1 2
require 'gitlab' # Load lib/gitlab.rb as soon as possible

3
class Settings < Settingslogic
4
  source ENV.fetch('GITLAB_CONFIG') { "#{Rails.root}/config/gitlab.yml" }
5
  namespace Rails.env
6 7

  class << self
8 9
    def gitlab_on_standard_port?
      gitlab.port.to_i == (gitlab.https ? 443 : 80)
R
Riyad Preukschas 已提交
10
    end
11 12 13 14 15 16 17 18 19
    
    # get host without www, thanks to http://stackoverflow.com/a/6674363/1233435
    def get_host_without_www(url)
      url = URI.encode(url)
      uri = URI.parse(url)
      uri = URI.parse("http://#{url}") if uri.scheme.nil?
      host = uri.host.downcase
      host.start_with?('www.') ? host[4..-1] : host
    end
R
Riyad Preukschas 已提交
20 21 22

    private

23 24 25
    def build_gitlab_shell_ssh_path_prefix
      if gitlab_shell.ssh_port != 22
        "ssh://#{gitlab_shell.ssh_user}@#{gitlab_shell.ssh_host}:#{gitlab_shell.ssh_port}/"
R
Riyad Preukschas 已提交
26
      else
27 28 29 30 31
        if gitlab_shell.ssh_host.include? ':'
          "[#{gitlab_shell.ssh_user}@#{gitlab_shell.ssh_host}]:"
        else
          "#{gitlab_shell.ssh_user}@#{gitlab_shell.ssh_host}:"
        end
R
Riyad Preukschas 已提交
32 33 34 35
      end
    end

    def build_gitlab_url
36
      custom_port = gitlab_on_standard_port? ? nil : ":#{gitlab.port}"
R
Riyad Preukschas 已提交
37 38 39
      [ gitlab.protocol,
        "://",
        gitlab.host,
40 41
        custom_port,
        gitlab.relative_url_root
R
Riyad Preukschas 已提交
42 43
      ].join('')
    end
D
Dmitriy Zaporozhets 已提交
44

45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66
    # check that values in `current` (string or integer) is a contant in `modul`.
    def verify_constant_array(modul, current, default)
      values = default || []
      if !current.nil?
        values = []
        current.each do |constant|
          values.push(verify_constant(modul, constant, nil))
        end
        values.delete_if { |value| value.nil? }
      end
      values
    end

    # check that `current` (string or integer) is a contant in `modul`.
    def verify_constant(modul, current, default)
      constant = modul.constants.find{ |name| modul.const_get(name) == current }
      value = constant.nil? ? default : modul.const_get(constant)
      if current.is_a? String
        value = modul.const_get(current.upcase) rescue default
      end
      value
    end
67 68
  end
end
R
Riyad Preukschas 已提交
69 70 71 72


# Default settings
Settings['ldap'] ||= Settingslogic.new({})
73
Settings.ldap['enabled'] = false if Settings.ldap['enabled'].nil?
74

75 76 77
# backwards compatibility, we only have one host
if Settings.ldap['enabled'] || Rails.env.test?
  if Settings.ldap['host'].present?
78 79
    # We detected old LDAP configuration syntax. Update the config to make it
    # look like it was entered with the new syntax.
80
    server = Settings.ldap.except('sync_time')
81
    Settings.ldap['servers'] = {
82
      'main' => server
83
    }
84 85
  end

86
  Settings.ldap['servers'].each do |key, server|
87
    server['label'] ||= 'LDAP'
88
    server['block_auto_created_users'] = false if server['block_auto_created_users'].nil?
89 90
    server['allow_username_or_email_login'] = false if server['allow_username_or_email_login'].nil?
    server['active_directory'] = true if server['active_directory'].nil?
91
    server['provider_name'] ||= "ldap#{key}".downcase
92 93 94
    server['provider_class'] = OmniAuth::Utils.camelize(server['provider_name'])
  end
end
R
Riyad Preukschas 已提交
95

V
Valery Sizov 已提交
96

R
Riyad Preukschas 已提交
97
Settings['omniauth'] ||= Settingslogic.new({})
98
Settings.omniauth['enabled']      = false if Settings.omniauth['enabled'].nil?
99
Settings.omniauth['auto_sign_in_with_provider'] = false if Settings.omniauth['auto_sign_in_with_provider'].nil?
100 101 102
Settings.omniauth['allow_single_sign_on'] = false if Settings.omniauth['allow_single_sign_on'].nil?
Settings.omniauth['block_auto_created_users'] = true if Settings.omniauth['block_auto_created_users'].nil?
Settings.omniauth['auto_link_ldap_user'] = false if Settings.omniauth['auto_link_ldap_user'].nil?
103

R
Riyad Preukschas 已提交
104 105
Settings.omniauth['providers']  ||= []

106 107
Settings['issues_tracker']  ||= {}

108 109 110
#
# GitLab
#
R
Riyad Preukschas 已提交
111
Settings['gitlab'] ||= Settingslogic.new({})
112
Settings.gitlab['default_projects_limit'] ||= 10
113
Settings.gitlab['default_branch_protection'] ||= 2
114
Settings.gitlab['default_can_create_group'] = true if Settings.gitlab['default_can_create_group'].nil?
115
Settings.gitlab['default_theme'] = Gitlab::Themes::APPLICATION_DEFAULT if Settings.gitlab['default_theme'].nil?
D
Dmitriy Zaporozhets 已提交
116
Settings.gitlab['host']       ||= 'localhost'
D
Dmitriy Zaporozhets 已提交
117
Settings.gitlab['ssh_host']   ||= Settings.gitlab.host
118
Settings.gitlab['https']        = false if Settings.gitlab['https'].nil?
R
Riyad Preukschas 已提交
119
Settings.gitlab['port']       ||= Settings.gitlab.https ? 443 : 80
120
Settings.gitlab['relative_url_root'] ||= ENV['RAILS_RELATIVE_URL_ROOT'] || ''
R
Riyad Preukschas 已提交
121
Settings.gitlab['protocol']   ||= Settings.gitlab.https ? "https" : "http"
122 123 124 125
Settings.gitlab['email_enabled'] ||= true if Settings.gitlab['email_enabled'].nil?
Settings.gitlab['email_from'] ||= "gitlab@#{Settings.gitlab.host}"
Settings.gitlab['email_display_name'] ||= "GitLab"
Settings.gitlab['email_reply_to'] ||= "noreply@#{Settings.gitlab.host}"
D
Dmitriy Zaporozhets 已提交
126
Settings.gitlab['url']        ||= Settings.send(:build_gitlab_url)
D
Dmitriy Zaporozhets 已提交
127
Settings.gitlab['user']       ||= 'git'
128 129 130 131 132
Settings.gitlab['user_home']  ||= begin
  Etc.getpwnam(Settings.gitlab['user']).dir
rescue ArgumentError # no user configured
  '/home/' + Settings.gitlab['user']
end
133
Settings.gitlab['time_zone']  ||= nil
D
Dmitriy Zaporozhets 已提交
134
Settings.gitlab['signup_enabled'] ||= true if Settings.gitlab['signup_enabled'].nil?
135
Settings.gitlab['signin_enabled'] ||= true if Settings.gitlab['signin_enabled'].nil?
136
Settings.gitlab['twitter_sharing_enabled'] ||= true if Settings.gitlab['twitter_sharing_enabled'].nil?
137
Settings.gitlab['restricted_visibility_levels'] = Settings.send(:verify_constant_array, Gitlab::VisibilityLevel, Settings.gitlab['restricted_visibility_levels'], [])
138
Settings.gitlab['username_changing_enabled'] = true if Settings.gitlab['username_changing_enabled'].nil?
D
Douwe Maan 已提交
139
Settings.gitlab['issue_closing_pattern'] = '((?:[Cc]los(?:e[sd]?|ing)|[Ff]ix(?:e[sd]|ing)?|[Rr]esolv(?:e[sd]?|ing)) +(?:(?:issues? +)?#\d+(?:(?:, *| +and +)?))+)' if Settings.gitlab['issue_closing_pattern'].nil?
140
Settings.gitlab['default_projects_features'] ||= {}
141
Settings.gitlab['webhook_timeout'] ||= 10
142
Settings.gitlab['max_attachment_size'] ||= 10
143
Settings.gitlab['session_expire_delay'] ||= 10080
144 145 146
Settings.gitlab.default_projects_features['issues']         = true if Settings.gitlab.default_projects_features['issues'].nil?
Settings.gitlab.default_projects_features['merge_requests'] = true if Settings.gitlab.default_projects_features['merge_requests'].nil?
Settings.gitlab.default_projects_features['wiki']           = true if Settings.gitlab.default_projects_features['wiki'].nil?
147
Settings.gitlab.default_projects_features['snippets']       = false if Settings.gitlab.default_projects_features['snippets'].nil?
148
Settings.gitlab.default_projects_features['visibility_level']    = Settings.send(:verify_constant, Gitlab::VisibilityLevel, Settings.gitlab.default_projects_features['visibility_level'], Gitlab::VisibilityLevel::PRIVATE)
149
Settings.gitlab['repository_downloads_path'] = File.absolute_path(Settings.gitlab['repository_downloads_path'] || 'tmp/repositories', Rails.root)
150
Settings.gitlab['restricted_signup_domains'] ||= []
151
Settings.gitlab['import_sources'] ||= ['github','bitbucket','gitlab','gitorious','google_code','git']
R
Riyad Preukschas 已提交
152

D
Douwe Maan 已提交
153 154 155 156
#
# Reply by email
#
Settings['reply_by_email'] ||= Settingslogic.new({})
D
Douwe Maan 已提交
157
Settings.reply_by_email['enabled'] = false if Settings.reply_by_email['enabled'].nil?
D
Douwe Maan 已提交
158

159 160 161
#
# Gravatar
#
R
Riyad Preukschas 已提交
162
Settings['gravatar'] ||= Settingslogic.new({})
163
Settings.gravatar['enabled']      = true if Settings.gravatar['enabled'].nil?
164 165
Settings.gravatar['plain_url']  ||= 'http://www.gravatar.com/avatar/%{hash}?s=%{size}&d=identicon'
Settings.gravatar['ssl_url']    ||= 'https://secure.gravatar.com/avatar/%{hash}?s=%{size}&d=identicon'
166
Settings.gravatar['host']         = Settings.get_host_without_www(Settings.gravatar['plain_url'])
R
Riyad Preukschas 已提交
167

168 169 170 171
#
# GitLab Shell
#
Settings['gitlab_shell'] ||= Settingslogic.new({})
172
Settings.gitlab_shell['path']         ||= Settings.gitlab['user_home'] + '/gitlab-shell/'
173
Settings.gitlab_shell['hooks_path']   ||= Settings.gitlab['user_home'] + '/gitlab-shell/hooks/'
174
Settings.gitlab_shell['secret_file'] ||= Rails.root.join('.gitlab_shell_secret')
175 176
Settings.gitlab_shell['receive_pack']   = true if Settings.gitlab_shell['receive_pack'].nil?
Settings.gitlab_shell['upload_pack']    = true if Settings.gitlab_shell['upload_pack'].nil?
177
Settings.gitlab_shell['repos_path']   ||= Settings.gitlab['user_home'] + '/repositories/'
D
Dmitriy Zaporozhets 已提交
178
Settings.gitlab_shell['ssh_host']     ||= Settings.gitlab.ssh_host
179 180 181 182
Settings.gitlab_shell['ssh_port']     ||= 22
Settings.gitlab_shell['ssh_user']     ||= Settings.gitlab.user
Settings.gitlab_shell['owner_group']  ||= Settings.gitlab.user
Settings.gitlab_shell['ssh_path_prefix'] ||= Settings.send(:build_gitlab_shell_ssh_path_prefix)
R
Riyad Preukschas 已提交
183

184 185 186
#
# Backup
#
R
Riyad Preukschas 已提交
187
Settings['backup'] ||= Settingslogic.new({})
D
Dmitriy Zaporozhets 已提交
188 189
Settings.backup['keep_time']  ||= 0
Settings.backup['path']         = File.expand_path(Settings.backup['path'] || "tmp/backups/", Rails.root)
190
Settings.backup['archive_permissions']          ||= 0600
191
Settings.backup['upload'] ||= Settingslogic.new({ 'remote_directory' => nil, 'connection' => nil })
192 193 194 195
# Convert upload connection settings to use symbol keys, to make Fog happy
if Settings.backup['upload']['connection']
  Settings.backup['upload']['connection'] = Hash[Settings.backup['upload']['connection'].map { |k, v| [k.to_sym, v] }]
end
196
Settings.backup['upload']['multipart_chunk_size'] ||= 104857600
R
Riyad Preukschas 已提交
197

198 199 200
#
# Git
#
R
Riyad Preukschas 已提交
201
Settings['git'] ||= Settingslogic.new({})
202
Settings.git['max_size']  ||= 20971520 # 20.megabytes
D
Dmitriy Zaporozhets 已提交
203
Settings.git['bin_path']  ||= '/usr/bin/git'
204
Settings.git['timeout']   ||= 10
205

R
Riyad Preukschas 已提交
206
Settings['satellites'] ||= Settingslogic.new({})
R
Riyad Preukschas 已提交
207
Settings.satellites['path'] = File.expand_path(Settings.satellites['path'] || "tmp/repo_satellites/", Rails.root)
208
Settings.satellites['timeout'] ||= 30
209 210 211 212 213

#
# Extra customization
#
Settings['extra'] ||= Settingslogic.new({})
214

215 216 217 218 219
#
# Rack::Attack settings
#
Settings['rack_attack'] ||= Settingslogic.new({})
Settings.rack_attack['git_basic_auth'] ||= Settingslogic.new({})
220
Settings.rack_attack.git_basic_auth['enabled'] = true if Settings.rack_attack.git_basic_auth['enabled'].nil?
221
Settings.rack_attack.git_basic_auth['ip_whitelist'] ||= %w{127.0.0.1}
222 223 224 225
Settings.rack_attack.git_basic_auth['maxretry'] ||= 10
Settings.rack_attack.git_basic_auth['findtime'] ||= 1.minute
Settings.rack_attack.git_basic_auth['bantime'] ||= 1.hour

226 227 228 229 230
#
# Testing settings
#
if Rails.env.test?
  Settings.gitlab['default_projects_limit']   = 42
231
  Settings.gitlab['default_can_create_group'] = true
232 233
  Settings.gitlab['default_can_create_team']  = false
end