【NAS】绿联NAS+极狐Gitlab+1Panel

1. 准备域名

例如我的 ???.mllt.cc

2. 内网穿透

我使用的Natfrp(https://www.natfrp.com/tunnel/)

创建HTTP隧道(对应端口10080)创建HTTP隧道(对应端口10443)
注意这两隧道要一致，以便绑定同一个域名???.mllt.cc

然后在域名解析那里，将???.mllt.cc解析到隧道地址

3.使用1panel申请SSL证书，下载证书key和crt

命名格式为
???.mllt.cc.crt ???.mllt.cc.key
有这两个文件

ok，到目前为止，域名，穿透，SSL证书，都准备好了

4 绿联->docker->项目->

version: '3.8' services: web: image: 'registry.gitlab.cn/omnibus/gitlab-jh:latest' restart: no hostname: '???.mllt.cc' environment: GITLAB_OMNIBUS_CONFIG: | external_url 'https://???.mllt.cc' gitlab_rails['gitlab_shell_ssh_port'] = 10022 ports: - '10080:80' - '10443:443' - '10022:22' volumes: - '/volume1/docker/gitlab/config:/etc/gitlab' - '/volume1/docker/gitlab/logs:/var/log/gitlab' - '/volume1/docker/gitlab/data:/var/opt/gitlab' shm_size: '256m'
version: '3.8' services: web: image: 'registry.gitlab.cn/omnibus/gitlab-jh:latest' restart: no hostname: '???.mllt.cc' environment: GITLAB_OMNIBUS_CONFIG: | external_url 'https://???.mllt.cc' gitlab_rails['gitlab_shell_ssh_port'] = 10022 ports: - '10080:80' - '10443:443' - '10022:22' volumes: - '/volume1/docker/gitlab/config:/etc/gitlab' - '/volume1/docker/gitlab/logs:/var/log/gitlab' - '/volume1/docker/gitlab/data:/var/opt/gitlab' shm_size: '256m'
version: '3.8' services: web: image: 'registry.gitlab.cn/omnibus/gitlab-jh:latest' restart: no hostname: '???.mllt.cc' environment: GITLAB_OMNIBUS_CONFIG: | external_url 'https://???.mllt.cc' gitlab_rails['gitlab_shell_ssh_port'] = 10022 ports: - '10080:80' - '10443:443' - '10022:22' volumes: - '/volume1/docker/gitlab/config:/etc/gitlab' - '/volume1/docker/gitlab/logs:/var/log/gitlab' - '/volume1/docker/gitlab/data:/var/opt/gitlab' shm_size: '256m'

/volume1 就是共享文件夹。docker是默认就有的，gitlab自己创建，里面的文件夹记得提前创建

基本就OK了，然后把???.mllt.cc.crt ???.mllt.cc.key 上传到/volume1/docker/gitlab/config/ssl里面，里面本来就有这俩文件，先删除了再上传

然后就可以了

5.获取登录密码(账号root)

/volume1/docker/gitlab/config/initial_root_password
/volume1/docker/gitlab/config/initial_root_password
/volume1/docker/gitlab/config/initial_root_password

6.修改密码 额 先切换中文吧

6.切换中文

都中文了，自己设置去。

记得先修改密码，然后重新登录

7.配置邮件

官方文档：https://gitlab.cn/docs/omnibus/settings/smtp.html
如果你对邮件方面不是很懂，那你把基础的东西设置了就行

gitlab_rails['smtp_enable'] = true gitlab_rails['smtp_address'] = "smtp.qiye.163.com" gitlab_rails['smtp_port'] = 25 gitlab_rails['smtp_user_name'] = "发送邮件的账号" gitlab_rails['smtp_password'] = "发送邮件的密码" gitlab_rails['smtp_pool'] = true #SMTP连接池 gitlab_rails['gitlab_email_from'] = '' gitlab_rails['gitlab_email_reply_to'] = ''
gitlab_rails['smtp_enable'] = true gitlab_rails['smtp_address'] = "smtp.qiye.163.com" gitlab_rails['smtp_port'] = 25 gitlab_rails['smtp_user_name'] = "发送邮件的账号" gitlab_rails['smtp_password'] = "发送邮件的密码" gitlab_rails['smtp_pool'] = true #SMTP连接池 gitlab_rails['gitlab_email_from'] = '' gitlab_rails['gitlab_email_reply_to'] = ''
gitlab_rails['smtp_enable'] = true gitlab_rails['smtp_address'] = "smtp.qiye.163.com" gitlab_rails['smtp_port'] = 25 gitlab_rails['smtp_user_name'] = "发送邮件的账号" gitlab_rails['smtp_password'] = "发送邮件的密码" gitlab_rails['smtp_pool'] = true #SMTP连接池 gitlab_rails['gitlab_email_from'] = '' gitlab_rails['gitlab_email_reply_to'] = ''

如果你懂的话你可以多配置一些，把SSL都整上，如果你不是很懂，那就别配置的太复杂了

8.外观更改

https://gitlab.cn/docs/jh/administration/appearance.html

9.配置降低

下面的配置我是根据网络上的分享进行配置的
占用情况的话：

【警告】请不要完全复制下面的内容，自己判断自己是否需要那些功能

# start 性能优化 # 禁用 Puma 集群模式，减少内存占用 # puma['worker_processes'] = 0 # 这个在后文设置过了 # 限制 Sidekiq 的并发数量，减少内存消耗 # sidekiq['max_concurrency'] = 10 # 这个在后文设置过了 # 禁用监控相关服务，节省资源 prometheus_monitoring['enable'] = false alertmanager['enable'] = false node_exporter['enable'] = false redis_exporter['enable'] = false postgres_exporter['enable'] = false pgbouncer_exporter['enable'] = false gitlab_exporter['enable'] = false sidekiq['metrics_enabled'] = false # 禁用容器仓库功能 gitlab_rails['gitlab_default_projects_features_container_registry'] = false registry['enable'] = false registry_nginx['enable'] = false # 禁用包仓库和依赖管理功能 gitlab_rails['packages_enabled'] = false gitlab_rails['dependency_proxy_enabled'] = false # 禁用 GitLab Pages # gitlab_pages['enable'] = false # pages_nginx['enable'] = false # 禁用使用统计和错误报告功能 gitlab_rails['usage_ping_enabled'] = false gitlab_rails['sentry_enabled'] = false # 禁用 GitLab KAS (Kubernetes Agent) gitlab_kas['enable'] = false gitlab_rails['gitlab_kas_enabled'] = false # 禁用 Terraform 状态管理 gitlab_rails['terraform_state_enabled'] = false # 禁用 Kerberos(仅适用于 EE 版本，默认为 false) # gitlab_rails['kerberos_enabled'] = false # 禁用 Sentinel sentinel['enable'] = false # 禁用 Mattermost mattermost['enable'] = false mattermost_nginx['enable'] = false # 优化 GitLab Rails 内存分配 gitlab_rails['env'] = { 'MALLOC_CONF' => 'dirty_decay_ms:1000,muzzy_decay_ms:1000' } # 禁用 CI/CD 中的一些非必要功能 gitlab_ci['gitlab_ci_all_broken_builds'] = false gitlab_ci['gitlab_ci_add_pusher'] = false # end 性能优化 参考资料：https://zhuanlan.zhihu.com/p/389717047
# start 性能优化 # 禁用 Puma 集群模式，减少内存占用 # puma['worker_processes'] = 0 # 这个在后文设置过了 # 限制 Sidekiq 的并发数量，减少内存消耗 # sidekiq['max_concurrency'] = 10 # 这个在后文设置过了 # 禁用监控相关服务，节省资源 prometheus_monitoring['enable'] = false alertmanager['enable'] = false node_exporter['enable'] = false redis_exporter['enable'] = false postgres_exporter['enable'] = false pgbouncer_exporter['enable'] = false gitlab_exporter['enable'] = false sidekiq['metrics_enabled'] = false # 禁用容器仓库功能 gitlab_rails['gitlab_default_projects_features_container_registry'] = false registry['enable'] = false registry_nginx['enable'] = false # 禁用包仓库和依赖管理功能 gitlab_rails['packages_enabled'] = false gitlab_rails['dependency_proxy_enabled'] = false # 禁用 GitLab Pages # gitlab_pages['enable'] = false # pages_nginx['enable'] = false # 禁用使用统计和错误报告功能 gitlab_rails['usage_ping_enabled'] = false gitlab_rails['sentry_enabled'] = false # 禁用 GitLab KAS (Kubernetes Agent) gitlab_kas['enable'] = false gitlab_rails['gitlab_kas_enabled'] = false # 禁用 Terraform 状态管理 gitlab_rails['terraform_state_enabled'] = false # 禁用 Kerberos(仅适用于 EE 版本，默认为 false) # gitlab_rails['kerberos_enabled'] = false # 禁用 Sentinel sentinel['enable'] = false # 禁用 Mattermost mattermost['enable'] = false mattermost_nginx['enable'] = false # 优化 GitLab Rails 内存分配 gitlab_rails['env'] = { 'MALLOC_CONF' => 'dirty_decay_ms:1000,muzzy_decay_ms:1000' } # 禁用 CI/CD 中的一些非必要功能 gitlab_ci['gitlab_ci_all_broken_builds'] = false gitlab_ci['gitlab_ci_add_pusher'] = false # end 性能优化 参考资料：https://zhuanlan.zhihu.com/p/389717047
# start 性能优化 # 禁用 Puma 集群模式，减少内存占用 # puma['worker_processes'] = 0 # 这个在后文设置过了 # 限制 Sidekiq 的并发数量，减少内存消耗 # sidekiq['max_concurrency'] = 10 # 这个在后文设置过了 # 禁用监控相关服务，节省资源 prometheus_monitoring['enable'] = false alertmanager['enable'] = false node_exporter['enable'] = false redis_exporter['enable'] = false postgres_exporter['enable'] = false pgbouncer_exporter['enable'] = false gitlab_exporter['enable'] = false sidekiq['metrics_enabled'] = false # 禁用容器仓库功能 gitlab_rails['gitlab_default_projects_features_container_registry'] = false registry['enable'] = false registry_nginx['enable'] = false # 禁用包仓库和依赖管理功能 gitlab_rails['packages_enabled'] = false gitlab_rails['dependency_proxy_enabled'] = false # 禁用 GitLab Pages # gitlab_pages['enable'] = false # pages_nginx['enable'] = false # 禁用使用统计和错误报告功能 gitlab_rails['usage_ping_enabled'] = false gitlab_rails['sentry_enabled'] = false # 禁用 GitLab KAS (Kubernetes Agent) gitlab_kas['enable'] = false gitlab_rails['gitlab_kas_enabled'] = false # 禁用 Terraform 状态管理 gitlab_rails['terraform_state_enabled'] = false # 禁用 Kerberos(仅适用于 EE 版本，默认为 false) # gitlab_rails['kerberos_enabled'] = false # 禁用 Sentinel sentinel['enable'] = false # 禁用 Mattermost mattermost['enable'] = false mattermost_nginx['enable'] = false # 优化 GitLab Rails 内存分配 gitlab_rails['env'] = { 'MALLOC_CONF' => 'dirty_decay_ms:1000,muzzy_decay_ms:1000' } # 禁用 CI/CD 中的一些非必要功能 gitlab_ci['gitlab_ci_all_broken_builds'] = false gitlab_ci['gitlab_ci_add_pusher'] = false # end 性能优化 参考资料：https://zhuanlan.zhihu.com/p/389717047

关于里面的一些参数推荐值，可以查阅：https://gitlab.cn/docs/en/ee/install/requirements.html#storage

原文链接：https://blog.csdn.net/ks2686/article/details/144681425?ops_request_misc=%257B%2522request%255Fid%2522%253A%2522ec73028c8efd7250434d29cd8dfce2de%2522%252C%2522scm%2522%253A%252220140713.130102334.pc%255Fblog.%2522%257D&request_id=ec73028c8efd7250434d29cd8dfce2de&biz_id=0&utm_medium=distribute.pc_search_result.none-task-blog-2~blog~first_rank_ecpm_v1~times_rank-3-144681425-null-null.nonecase&utm_term=%E7%BB%BF%E8%81%94nas