Turning off SSL

Our current GitLab(s) use SSL, so our configuration management sets that up, also in test environments.

Now I’m trying to set adapt it so we can set up GitLab behind a load-balancer that does SSL termination (it says here: Reference architecture: up to 3,000 users | GitLab that GitLab can run in an environment like that).
So I’ve modified the /etc/gitlab/gitlab.rb that our configuration management puts in, so it doesn’t reference the certificate/key, but now gitlab-ctl reconfigure puts

  ssl_certificate /etc/gitlab/ssl/<hostname>.crt;
  ssl_certificate_key /etc/gitlab/ssl/<hostname>.key;

into /var/opt/gitlab/nginx/conf/gitlab-http.conf, and as those files don’t exist (even the directory doesn’t) that means nginx won’t start. What am I doing wrong that causes gitlab-ctl reconfigure to produce that silly configuration?

This seems to be caused by having https in external_url in /etc/gitlab/gitlab.rb, it goes away if I change it to http, but as I still want everything external (and I guess that often gets the external_url) to use https, that seems a bit illogical to me?

Hi, You can review the NGINX settings | GitLab page on how to work with External proxy and LB SSL terminations.

That helped, thanks.
In case anyone finds this and is too lazy to check the link, the point was to add

nginx['listen_port'] = 80
nginx['listen_https'] = false

to /etc/gitlab/gitlab.rb.