Gitlab-pages and custom domain

How to Use GitLab Self-managed
1

Hello.

I have this config for gitlab and gitlab-pages :

### GITLAB
external_url 'https://gitlab.domain.dev'

gitlab_rails['gitlab_ssh_host'] = 'domain.dev'
gitlab_rails['gitlab_shell_ssh_port'] = 22

nginx['enable'] = true
nginx['listen_https'] = true
nginx['listen_port'] = 4431
nginx['ssl_dhparam'] = '/etc/gitlab/dhparam.pem'
nginx['ssl_certificate'] = '/run/secrets/ssl_certificate'
nginx['ssl_certificate_key'] = '/run/secrets/ssl_certificate_key'
nginx['ssl_trusted_certificate'] = '/run/secrets/ssl_trusted_certificate'

### GITLAB-PAGES
pages_external_url 'https://pages.domain.dev'

pages_nginx['enable'] = true
pages_nginx['listen_https'] = true
pages_nginx['listen_port'] = 4432
pages_nginx['ssl_dhparam'] = '/etc/gitlab/dhparam.pem'
pages_nginx['ssl_certificate'] = '/run/secrets/ssl_certificate'
pages_nginx['ssl_certificate_key'] = '/run/secrets/ssl_certificate_key'
pages_nginx['ssl_trusted_certificate'] = '/run/secrets/ssl_trusted_certificate'

And this for nginx and gitlab-pages :

### GITLAB-PAGES

server {
  listen 80;
  listen [::]:80;

  server_name *.pages.domain.dev;

  server_tokens off;
  
  access_log /var/log/nginx/gitlab_pages_access.log;
  error_log /var/log/nginx/gitlab_pages_error.log;

  return 301 https://$http_host$request_uri;
}

server {
  listen 443 ssl;
  listen [::]:443 ssl;

  server_name *.pages.domain.dev;
  
  server_tokens off;

  ssl_certificate /run/secrets/ssl_certificate;
  ssl_certificate_key /run/secrets/ssl_certificate_key;
  ssl_trusted_certificate /run/secrets/ssl_trusted_certificate;

  access_log /var/log/nginx/gitlab_pages_access.log;
  error_log /var/log/nginx/gitlab_pages_error.log;

  location / {
    proxy_set_header Host              $http_host;
    proxy_set_header X-Real-IP         $remote_addr;
    proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;

    proxy_cache off;

    proxy_pass https://gitlab:4432;
  }
}

All run correctly but for config custom domain for my gitlab page i have this msg : “Support for domains and certificates is disabled. Ask your system’s administrator to enable it.”

What I have to do for to be able to add a custom domain for my gitlab page. Please

I’m looking for to have https://ajulien.pages.domain.dev/www available with https://www.ajulien.fr

Please

2

The docs for custom domains require a secondary IP and different settings for pages directly serving external http traffic. This needs to be configured by an admin for GitLab to recognize the new settings.

4

gitlab

create the folder in the host for gitlab container :

sudo mkdir -p \
/srv/gitlab/conf \
/srv/gitlab/log \
/srv/gitlab/data \
/srv/gitlab-runner/conf

gitlab container docker compose file :

volumes:
  gitlab_conf:
    name: gitlab-conf
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /srv/gitlab/conf

  gitlab_log:
    name: gitlab-log
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /srv/gitlab/log

  gitlab_data:
    name: gitlab-data
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /srv/gitlab/data

  gitlab_ssl:
    name: gitlab-ssl
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /etc/letsencrypt
  
  gitlab_runner_conf:
    name: gitlab-runner-conf
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /srv/gitlab-runner/conf

networks:
  gitlab_network:
    name: gitlab-network
  # https://docs.gitlab.com/ee/administration/pages/index.html#custom-domains-with-tls-support
  # Custom domains with TLS support
  # Requirements: Secondary IP
  gitlab_pages_network:
    name: gitlab-pages-network

services:
  gitlab:
    container_name: gitlab-container
    image: gitlab/gitlab-ce:latest
    restart: always
    volumes:
      - gitlab_conf:/etc/gitlab
      - gitlab_log:/var/log/gitlab
      - gitlab_data:/var/opt/gitlab
      - gitlab_ssl:/etc/letsencrypt
    networks:
      - gitlab_network
      - gitlab_pages_network
    ports:
      - 22:22
    shm_size: 256m
  gitlab_runner:
    container_name: gitlab-runner-container
    image: gitlab/gitlab-runner:latest
    restart: always
    volumes:
      - gitlab_runner_conf:/etc/gitlab-runner
      - /var/run/docker.sock:/var/run/docker.sock
    networks:
      - gitlab_network

sudo docker compose -p gitlab -f ./gitlab-docker-compose.yml up -d

config gitlab.rb :

sudo openssl dhparam -out /srv/gitlab/conf/dhparam.pem 2048

sudo cp /srv/gitlab/conf/gitlab.rb /srv/gitlab/conf/gitlab.rb.orig
sudo rm /srv/gitlab/conf/gitlab.rb

sudo nano /srv/gitlab/conf/gitlab.rb

### GITLAB
external_url 'https://gitlab.freec0ding.dev'

gitlab_rails['gitlab_ssh_host'] = 'freec0ding.dev'
gitlab_rails['gitlab_shell_ssh_port'] = 22

nginx['enable'] = true
nginx['listen_https'] = true
nginx['listen_port'] = 4431
nginx['ssl_dhparam'] = '/etc/gitlab/dhparam.pem'
nginx['ssl_certificate'] = '/etc/letsencrypt/live/freec0ding.dev/fullchain.pem'
nginx['ssl_certificate_key'] = '/etc/letsencrypt/live/freec0ding.dev/privkey.pem'
nginx['ssl_trusted_certificate'] = '/etc/letsencrypt/live/freec0ding.dev/chain.pem'

### GITLAB-PAGES
pages_external_url 'https://pages.freec0ding.dev'

pages_nginx['enable'] = true
pages_nginx['listen_https'] = true
pages_nginx['listen_port'] = 4432
pages_nginx['ssl_dhparam'] = '/etc/gitlab/dhparam.pem'
pages_nginx['ssl_certificate'] = '/etc/letsencrypt/live/freec0ding.dev/fullchain.pem'
pages_nginx['ssl_certificate_key'] = '/etc/letsencrypt/live/freec0ding.dev/privkey.pem'
pages_nginx['ssl_trusted_certificate'] = '/etc/letsencrypt/live/freec0ding.dev/chain.pem'

sudo docker exec gitlab-container gitlab-ctl reconfigure

use nginx as reverse proxy :

create the folder in the host for nginx container :

sudo mkdir -p \
/srv/web/nginx/conf \
/srv/web/nginx/log \
/srv/web/www-data

nginx container docker compose file :

volumes:
  nginx_conf:
    name: nginx-conf
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /srv/web/nginx/conf

  nginx_log:
    name: nginx-log
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /srv/web/nginx/log
  
  nginx_ssl:
    name: nginx-ssl
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /etc/letsencrypt

  www_data:
    name: www-data
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /srv/web/www-data

networks:
  web_network:
    name: web-network
  gitlab_network:
    name: gitlab-network
    external: true

services:
  nginx:
    container_name: nginx-container
    image: nginx:latest
    restart: always
    volumes:
      - nginx_conf:/etc/nginx
      - nginx_log:/var/log/nginx
      - nginx_ssl:/etc/letsencrypt
      - www_data:/usr/share/nginx/html
    networks:
      - web_network
      - gitlab_network
    ports:
      - 80:80
      - 443:443

sudo docker compose -p web -f ./web-docker-compose.yml up -d

conf files for nginx :

nginx gitlab.conf :

### GITLAB

server {
  listen 80;
  listen [::]:80;

  server_name gitlab.freec0ding.dev;

  server_tokens off;
  
  access_log /var/log/nginx/gitlab_access.log;
  error_log /var/log/nginx/gitlab_error.log;

  return 301 https://$http_host$request_uri;
}

server {
  listen 443 ssl;
  listen [::]:443 ssl;

  server_name gitlab.freec0ding.dev;
  
  server_tokens off;

  ssl_certificate /etc/letsencrypt/live/freec0ding.dev/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/freec0ding.dev/privkey.pem;
  ssl_trusted_certificate /etc/letsencrypt/live/freec0ding.dev/chain.pem;

  access_log /var/log/nginx/gitlab_access.log;
  error_log /var/log/nginx/gitlab_error.log;

  location / {
    proxy_set_header Host              $http_host;
    proxy_set_header X-Real-IP         $remote_addr;
    proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;

    proxy_cache off;

    proxy_pass https://gitlab:4431;
  }
}

nginx gitlab-pages.conf :

### GITLAB-PAGES

server {
  listen 80;
  listen [::]:80;

  server_name pages.freec0ding.dev;

  server_tokens off;
  
  access_log /var/log/nginx/gitlab_pages_access.log;
  error_log /var/log/nginx/gitlab_pages_error.log;

  return 301 https://$http_host$request_uri;
}

server {
  listen 443 ssl;
  listen [::]:443 ssl;

  server_name pages.freec0ding.dev;
  
  server_tokens off;

  ssl_certificate /etc/letsencrypt/live/freec0ding.dev/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/freec0ding.dev/privkey.pem;
  ssl_trusted_certificate /etc/letsencrypt/live/freec0ding.dev/chain.pem;

  access_log /var/log/nginx/gitlab_pages_access.log;
  error_log /var/log/nginx/gitlab_pages_error.log;

  location / {
    proxy_set_header Host              $http_host;
    proxy_set_header X-Real-IP         $remote_addr;
    proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;

    proxy_cache off;

    proxy_pass https://gitlab:4432;
  }
}

nginx gitlab-pages-wildcard.conf :

### GITLAB-PAGES-WILDCARD

server {
  listen 80;
  listen [::]:80;

  server_name *.pages.freec0ding.dev;

  server_tokens off;
  
  access_log /var/log/nginx/gitlab_pages_access.log;
  error_log /var/log/nginx/gitlab_pages_error.log;

  return 301 https://$http_host$request_uri;
}

server {
  listen 443 ssl;
  listen [::]:443 ssl;

  server_name *.pages.freec0ding.dev;
  
  server_tokens off;

  ssl_certificate /etc/letsencrypt/live/freec0ding.dev/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/freec0ding.dev/privkey.pem;
  ssl_trusted_certificate /etc/letsencrypt/live/freec0ding.dev/chain.pem;

  access_log /var/log/nginx/gitlab_pages_access.log;
  error_log /var/log/nginx/gitlab_pages_error.log;

  location / {
    proxy_set_header Host              $http_host;
    proxy_set_header X-Real-IP         $remote_addr;
    proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;

    proxy_cache off;

    proxy_pass https://gitlab:4432;
  }
}

sudo docker exec nginx-container service nginx restart

after create the project with Pages/Hugo template :

export RUNNER_TOKEN='XXXXX' && \
sudo -E docker exec -it gitlab-runner-container gitlab-runner register \
--non-interactive \
--url https://gitlab.freec0ding.dev \
--token ${RUNNER_TOKEN} \
--executor "docker" \
--docker-image alpine:latest \
--description "runner"

now I have my hugo page project on https://sysc4ll.pages.freec0ding.dev/www/

I would like to have this page on the url : https://www.sysc4ll.sh

What I have to do ? Please