GitLab 容器化部署与配置完全指南

version: '3.8'

services:
  gitlab:
    image: gitlab/gitlab-ce:17.2.0-ce.0
    container_name: gitlab
    restart: always
    hostname: 'gitlab.example.com'          # 修改为实际域名
    environment:
      GITLAB_OMNIBUS_CONFIG: |
        # 外部访问 URL
        external_url 'https://gitlab.example.com'

        # 时区
        gitlab_rails['time_zone'] = 'Asia/Shanghai'

        # SMTP 邮件配置（以 QQ 邮箱为例）
        gitlab_rails['smtp_enable'] = true
        gitlab_rails['smtp_address'] = 'smtp.qq.com'
        gitlab_rails['smtp_port'] = 465
        gitlab_rails['smtp_user_name'] = 'your-email@qq.com'
        gitlab_rails['smtp_password'] = 'your-smtp-auth-code'
        gitlab_rails['smtp_domain'] = 'qq.com'
        gitlab_rails['smtp_authentication'] = 'login'
        gitlab_rails['smtp_enable_starttls_auto'] = true
        gitlab_rails['smtp_tls'] = true
        gitlab_rails['gitlab_email_from'] = 'your-email@qq.com'
        gitlab_rails['gitlab_email_reply_to'] = 'your-email@qq.com'

        # 备份配置
        gitlab_rails['backup_keep_time'] = 604800          # 保留7天（秒）
        gitlab_rails['backup_path'] = '/var/opt/gitlab/backups'

        # 限制注册功能
        gitlab_rails['gitlab_signup_enabled'] = false      # 关闭开放注册
        gitlab_rails['gitlab_signin_oauth_auto_ldap_sync'] = false

        # SSH 端口
        gitlab_rails['gitlab_shell_ssh_port'] = 2222

        # Gitaly 配置
        gitaly['configuration'] = {
          storage: [
            {
              name: 'default',
              path: '/var/opt/gitlab/git-data/repositories',
            }
          ]
        }

        # Puma 配置（建议 = CPU 核数 + 1）
        puma['worker_processes'] = 3
        puma['min_threads'] = 4
        puma['max_threads'] = 16

        # Sidekiq 并发
        sidekiq['concurrency'] = 10
    ports:
      - '2222:22'          # SSH（映射到主机非标准端口）
      - '80:80'            # HTTP
      - '443:443'          # HTTPS
    volumes:
      - /opt/gitlab/config:/etc/gitlab
      - /opt/gitlab/logs:/var/log/gitlab
      - /opt/gitlab/data:/var/opt/gitlab
    shm_size: '256m'       # 增加共享内存，提升 Puma 性能
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost/-/health"]
      interval: 30s
      timeout: 10s
      retries: 5
      start_period: 120s

# 在 docker-compose.yml 中修改环境变量
environment:
  GITLAB_OMNIBUS_CONFIG: |
    external_url 'https://gitlab.example.com'
    nginx['listen_port'] = 80
    nginx['listen_https'] = false
    nginx['proxy_set_headers'] = {
      'X-Forwarded-Proto' => 'https',
      'X-Forwarded-Ssl' => 'on'
    }

stages:
  - test
  - build
  - deploy

variables:
  DOCKER_IMAGE_TAG: $CI_COMMIT_SHORT_SHA

# 测试阶段
test:
  stage: test
  image: node:20-alpine
  script:
    - npm install
    - npm run lint
    - npm test
  only:
    - main
    - merge_requests

# 构建阶段
build:
  stage: build
  image: docker:24
  services:
    - docker:24-dind
  script:
    - docker build -t registry.example.com/myapp:$DOCKER_IMAGE_TAG .
    - docker push registry.example.com/myapp:$DOCKER_IMAGE_TAG
  only:
    - main

# 部署阶段
deploy:
  stage: deploy
  image: alpine:latest
  before_script:
    - apk add --no-cache openssh-client
  script:
    - scp -o StrictHostKeyChecking=no docker-compose.yml deploy@server:/opt/app/
    - ssh deploy@server "cd /opt/app && docker compose pull && docker compose up -d"
  only:
    - main
  when: manual          # 手动触发部署

# 在 docker-compose.yml 中添加
environment:
  GITLAB_OMNIBUS_CONFIG: |
    # 启用 Container Registry
    registry_external_url 'https://registry.example.com'
    registry_nginx['listen_port'] = 5050
    registry_nginx['listen_https'] = false
# 添加端口映射
ports:
  - '5050:5050'

# 在 docker-compose.yml 中添加资源限制
services:
  gitlab:
    deploy:
      resources:
        limits:
          cpus: '4'
          memory: 8G
        reservations:
          cpus: '2'
          memory: 4G

# 在 docker-compose.yml 中添加独立 PostgreSQL
services:
  gitlab:
    # ... 原有配置 ...
    environment:
      GITLAB_OMNIBUS_CONFIG: |
        # 使用外部数据库
        postgresql['enable'] = false
        gitlab_rails['db_adapter'] = 'postgresql'
        gitlab_rails['db_username'] = 'gitlab'
        gitlab_rails['db_password'] = 'secure_password'
        gitlab_rails['db_host'] = 'postgresql'
        gitlab_rails['db_port'] = 5432

  postgresql:
    image: postgres:16-alpine
    container_name: gitlab-postgresql
    restart: always
    environment:
      POSTGRES_USER: gitlab
      POSTGRES_PASSWORD: secure_password
      POSTGRES_DB: gitlabhq_production
    volumes:
      - /opt/gitlab/postgresql:/var/lib/postgresql/data
    deploy:
      resources:
        limits:
          memory: 2G