gitlab.rb

# Avoid running unnecessary services on the Praefect server
gitaly['enable'] = true
postgresql['enable'] = true
redis['enable'] = false
puma['enable'] = false
sidekiq['enable'] = false
gitlab_workhorse['enable'] = true
prometheus['enable'] = false
alertmanager['enable'] = true
grafana['enable'] = false
gitlab_exporter['enable'] = false
nginx['enable'] = true

# Praefect Configuration
praefect['enable'] = true
praefect['listen_addr'] = '127.0.0.1:2305'

# Prevent database migrations from running on upgrade automatically
praefect['auto_migrate'] = false
gitlab_rails['auto_migrate'] = false

# Configure the Consul agent
consul['enable'] = true
## Enable service discovery for Prometheus
consul['monitoring_service_discovery'] =  true

# START user configuration
# Please set the real values as explained in Required Information section
#

# Praefect External Token
# This is needed by clients outside the cluster (like GitLab Shell) to communicate with the Praefect cluster
praefect['auth_token'] = '<praefect_external_token>'

# Praefect Database Settings
praefect['database_host'] = '10.6.0.141'
praefect['database_port'] = 5432
# `no_proxy` settings must always be a direct connection for caching
praefect['database_host_no_proxy'] = '10.6.0.141'
praefect['database_port_no_proxy'] = 5432
praefect['database_dbname'] = 'praefect_production'
praefect['database_user'] = 'praefect'
praefect['database_password'] = '<praefect_postgresql_password>'

# Praefect Virtual Storage config
# Name of storage hash must match storage name in git_data_dirs on GitLab
# server ('praefect') and in git_data_dirs on Gitaly nodes ('gitaly-1')
praefect['virtual_storages'] = {
  'default' => {
    'nodes' => {
      'gitaly-1' => {
        'address' => 'tcp://10.6.0.91:8005',
        'token'   => '<praefect_internal_token>'
      },
      'gitaly-2' => {
        'address' => 'tcp://10.6.0.92:8005',
        'token'   => '<praefect_internal_token>'
      },
      'gitaly-3' => {
        'address' => 'tcp://10.6.0.93:8005',
        'token'   => '<praefect_internal_token>'
      },
    }
  }
}

# Set the network addresses that the exporters will listen on for monitoring
node_exporter['listen_address'] = '127.0.0.1:9000'
praefect['prometheus_listen_addr'] = '127.0.0.1:9652'

## The IPs of the Consul server nodes
## You can also use FQDNs and intermix them with IPs
consul['configuration'] = {
   retry_join: %w(10.6.0.11 10.6.0.12 10.6.0.13),
}
#
# END user configuration