Add the devise initializer config setting to enable the sending of notification
emails when a user changes their password.

Added a comment to remember developers to open merge request to omnibus
in future changes of the file.

in resque.yml.example

Codestyle changes

We will trust redis configuration params loading to Gitlab::RedisConfig.

We do not want to proceed with loading the app in this case, as it could
lose a secret needed to decrypt values in the database.

This class does quite a few interesting things so let's instrument it so
we can see how much time is being spent in this class.

If an environment variable exists for secret_key_base, use that -
always. But don't save it to secrets.yml.

Also ensure that we never write to secrets.yml if there's a non-blank
value there.

Move the last secret from .secret to config/secrets.yml, and delete
.secret if it exists.

.secret stores the secret token used for both encrypting login cookies
and for encrypting stored OTP secrets. We can't rotate this, because
that would invalidate all existing OTP secrets.

If the secret token is present in the .secret file or an environment
variable, save it as otp_key_base in secrets.yml. Now .secret can be
rotated without invalidating OTP secrets.

If the secret token isn't present (initial setup), then just generate a
separate otp_key_base and save in secrets.yml.

Update the docs to reflect that secrets.yml needs to be retained past
upgrades, but .secret doesn't.

Since this isn't an ActiveRecord::Base descendant it wasn't
instrumented.

Closes #20452

Also a couple of minor edits for this branch are included

This MR adds a string (thus max 255 chars) field to the enviroments
table to expose it later in other features.

Signed-off-by: NRémy Coutable <remy@rymai.me>

Signed-off-by: NRémy Coutable <remy@rymai.me>

This significantly reduces the DB churn in the PostReceive task when it
performs reference extraction.

See #18663

This allows us to see how much time is being spent in just parsing
HTML/XML documents.

Certain reverse proxies can send invalid IP addresses in the X-Forwarded-For header
For example, Apache can send (null).

Closes #20194

Storage path are not created until `TestEnv.init`, so we must skip
their validation on initialization.