What is Gitlab stack
Gitlab stack is a solution based on docker-compose that brings the famous DevOps platform GitLab and preconfigured NGINX and SMTP server to your cloud or VPS server.
What does Gitlab stack include
- Gitlab latest
- NGINX
- SMTP server
What is Gitlab
Gitlab is a centralized, integrated tool designed for web developers. It represents an open DevOps platform, offering private repositories for unlimited collaborators.
Who is using Gitlab
- Software developers
- DevOps engineers
What are the benefits of using Gitlab stack
- Preinstalled SMTP, and Сertbot
- Fast startup and better performance of the app
- Lower system overhead
Configuration settings
**Bug with installing self signed certificates in /etc/docker/certs.d/<registry>**
The docs say to install the CA cert in /etc/docker/certs.d/<registry>, and clearly that isn't sufficient.
In fact, they also need to be installed globally:
**Debian/Ubuntu**
Copy CA cert to /usr/local/share/ca-certificates.
sudo update-ca-certificates
sudo service docker restart
**RedHat**
Copy CA cert to /etc/pki/ca-trust/source/anchors or /usr/local/share/ca-certificates.
sudo update-ca-trust
sudo service docker restart
Companion apps
Nginx
knockd is a port-knock server. It listens to all traffic on an ethernet (or PPP) interface, looking for special knock sequences of port-hits. A client makes these port-hits by sending a TCP (or UDP) packet to a port on the server. This port need not be open -- since knockd listens at the link-layer level, it sees all traffic even if it's destined for a closed port. When the server detects a specific sequence of port-hits, it runs a command defined in its configuration file. This can be used to open up holes in a firewall for quick access.
Fail2ban scans log files and bans IPs that show the malicious signs. Highly recommended for simple VPS server setup
Portainer is a lightweight management UI which allows you to easily manage your different Docker environments (Docker hosts or Swarm clusters)
Real-time performance monitoring, done right!
Netdata positions itself as an alloy of the best features that the paid infrastructure monitoring solutions and open-source tools have. Its multifunctionality, velocity, and ease of use make it secure, reliable, and scalable. This tool enables you effortlessly perform your infrastructure slowdowns and anomalies, troubleshooting, and overall system monitoring with little to no configuration.