Package: gitlab
Version: 16.11.6-3~bpo12+1
Severity: normal
/var/lib/gitlab/public/assets is the path where the CSS and JS assets
used by GitLab Web UI are stored. These are built from source files as
part of the /usr/lib/gitlab/scripts/rake-tasks.sh actions.
On a GitLab instance that has been running for several years, this path
grew to 12GB over time, including 130 000 files. Emptying it then
re-building the assets did result in 780MB of disk usage instead, and only
8 000 files.
No side effect has been noticed so far when using the Web UI, beside
incidental fixes to some unexpected CSS behaviours that had been going
on for a while.
I suggest we update rake-tasks.sh to empty /var/lib/gitlab/public/assets
right before the building of the new assets, to prevent the obsolete
versions of the compiled assets from accumulating over time.
I am going to propose a patch to rake-tasks.sh soon, I will post again
here once it is available for review and testing.
-- System Information:
Debian Release: 12.6
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500,
'stable'), (100, 'bookworm-fasttrack'), (100, 'bookworm-backports-staging')
Architecture: amd64 (x86_64)
Kernel: Linux 6.9.9-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages gitlab depends on:
ii asciidoctor 2.0.18-2
ii bc 1.07.1-3+b1
ii bundler 2.3.15-2
ii bzip2 1.0.8-5+b1
ii dbconfig-pgsql 2.0.24
ii debconf [debconf-2.0] 1.5.82
ii fonts-font-awesome [node-font-awesome 5.0.10+really4.7.0~dfsg-4.1
]
ii gitlab-common 16.11.6+ds1-2~bpo12+1
ii gitlab-workhorse 16.11.6-3~bpo12+1
ii katex [node-katex] 0.16.4+~cs6.1.0-1
ii libjs-bootstrap4 [node-bootstrap] 4.6.1+dfsg1-4
ii libjs-pdf [node-pdfjs-dist] 2.14.305+dfsg-2
ii libjs-popper.js [node-popper.js] 1.16.1+ds-6
ii libruby3.1 [ruby-rexml] 3.1.2-7+deb12u1
ii libssl-dev 3.0.13-1~deb12u1
ii lsb-base 11.6
ii nginx [httpd] 1.22.1-9
ii node-autosize 4.0.4~dfsg1+~4.0.0-2
ii node-axios 1.2.1+dfsg-1
ii node-babel-loader 9.1.0-3
ii node-babel-plugin-lodash 3.3.4+~cs2.0.1-6
ii node-babel7 7.20.15+ds1+~cs214.269.168-3+deb12u2
ii node-brace-expansion 2.0.1-2
ii node-cache-loader 4.1.0+~cs2.0.0-4
ii node-clipboard 2.0.11+ds+~cs9.6.11-1
ii node-compression-webpack-plugin 10.0.0-2
ii node-copy-webpack-plugin 11.0.0-3
ii node-core-js 3.26.1-3
ii node-core-js-compat 3.26.1-3
ii node-core-js-pure 3.26.1-3
ii node-cron-validator 1.3.1-3
ii node-css-loader 6.7.2+~cs14.0.11-1
ii node-d3 5.16.0-10
ii node-d3-selection 1.4.0-8
ii node-dateformat 5.0.3-5
ii node-dompurify 2.4.1+dfsg+~2.4.0-1
ii node-exports-loader 4.0.0-1
ii node-file-loader 6.2.0-3
ii node-fuzzaldrin-plus 0.6.0+dfsg+~0.6.2-3
ii node-glob 8.0.3+~cs8.4.15-1
ii node-imports-loader 0.8.0-6
ii node-jed 1.1.1-4
ii node-jquery 3.6.1+dfsg+~3.5.14-1
ii node-jquery-ujs 1.2.3-2
ii node-js-cookie 3.0.1+~3.0.0-3
ii node-js-yaml 4.1.0+dfsg+~4.0.5-7
ii node-jszip 3.10.1+dfsg-1
ii node-jszip-utils 0.1.0+dfsg-1
ii node-lodash 4.17.21+dfsg+~cs8.31.198.20210220-9
ii node-marked 4.2.3+ds+~4.0.7-2
ii node-minimatch 5.1.1+~5.1.2-1
ii node-miragejs 0.1.46+~cs5.6.11-1
ii node-mousetrap 1.6.5~ds+~1.6.8-1
ii node-postcss 8.4.20+~cs8.0.23-1
ii node-prismjs 1.29.0+dfsg+~1.26.0-1
ii node-prosemirror-markdown 1.8.0-1
ii node-prosemirror-model 1.16.1+~cs1.1.5-2
ii node-prosemirror-state 1.3.4-2
ii node-prosemirror-view 1.23.13-2
ii node-raven-js 3.22.1+dfsg-7
ii node-raw-loader 4.0.2-3
ii node-style-loader 3.3.1-2
ii node-three-orbit-controls 82.1.0-3
ii node-three-stl-loader 1.0.6-4
ii node-timeago.js 4.0.2-7
ii node-underscore 1.13.4~dfsg+~1.11.4-3
ii node-url-loader 4.1.1-5
ii node-uuid 8.3.2+~8.3.3-3
ii node-vue 2.6.14+dfsg-5
ii node-vue-resource 1.5.3+dfsg+~1.3.6-3
ii node-webpack-stats-plugin 1.1.1-1
ii node-worker-loader 3.0.8-5
ii node-xterm 3.8.1+~cs0.9.0-1
ii node-yaml 2.1.3-2
ii nodejs 18.19.0+dfsg-6~deb12u2
ii nullmailer [mail-transport-agent] 1:2.2-4
ii ohai 18.1.3-2~bpo12+1
ii openssh-client 1:9.2p1-2+deb12u3
ii postgresql-client 15+248
ii postgresql-client-15 [postgresql-clie 15.7-0+deb12u1
nt]
ii postgresql-contrib 15+248
ii puma 6.4.0-2~bpo12+1
ii rake 13.0.6-3
ii redis-server 5:7.0.15-1~deb12u1
ii ruby 1:3.1
ii ruby-ace-rails-ap 4.1.1-1.1
ii ruby-acme-client 2.0.9-1
ii ruby-actioncable [node-rails-actionca 2:6.1.7.3+dfsg-2~deb12u1
ble]
ii ruby-activerecord-explain-analyze 0.1.0-2
ii ruby-acts-as-taggable-on 10.0.0-1~bpo12+1
ii ruby-addressable 2.8.1-1
ii ruby-akismet 3.0.0-1
ii ruby-apollo-upload-server 2.1.5-1~bpo12+1
ii ruby-app-store-connect 0.37.0-2~bpo12+1
ii ruby-asciidoctor-include-ext 0.4.0+gh-1
ii ruby-asciidoctor-kroki 0.8.0-1~bpo12+1
ii ruby-asciidoctor-plantuml 0.0.16-1
ii ruby-aws-sdk-cloudformation 1.41.0-2
ii ruby-aws-sdk-core 3.201.0-1~bpo12+1
ii ruby-aws-sdk-s3 1.155.0-1~bpo12+1
ii ruby-azure-storage-blob 2.0.0-3
ii ruby-azure-storage-common 2.0.1-6
ii ruby-babosa 2.0.0-1~bpo12+1
ii ruby-base32 0.3.4-1
ii ruby-batch-loader 2.0.1+dfsg-3
ii ruby-bcrypt 3.1.18-1
ii ruby-bootsnap 1.18.3-1~bpo12+1
ii ruby-bootstrap-form 4.2.0-2
ii ruby-browser 5.3.1-3~bpo12+1
ii ruby-carrierwave 1.3.2-2
ii ruby-cfpropertylist 3.0.6-1~bpo12+1
ii ruby-charlock-holmes 0.7.7-3+b2
ii ruby-chronic [ruby-gitlab-chronic] 0.10.5-2
ii ruby-chronic-duration [ruby-gitlab-ch 0.12.0-1~bpo12+1
ronic-duration]
ii ruby-circuitbox 2.0.0-1~bpo12+1
ii ruby-commonmarker 0.23.10-1~bpo12+1
ii ruby-connection-pool 2.4.1-1~bpo12+1
ii ruby-countries 4.2.2-1~bpo12+1
ii ruby-creole 0.5.0-3
ii ruby-cssbundling-rails 1.4.0-2~bpo12+1
ii ruby-cvss-suite 3.1.0-2
ii ruby-declarative-policy 1.1.0-1
ii ruby-dev 1:3.1
ii ruby-device-detector 1.0.1-2
ii ruby-devise 4.9.3-1~bpo12+1
ii ruby-devise-two-factor 4.0.2-1
ii ruby-diff-match-patch 0.1.0-2
ii ruby-diffy 3.4.2-1
ii ruby-digest-crc 0.4.0-2~bpo12+1
ii ruby-discordrb-webhooks 3.5.0-1~bpo12+1
ii ruby-doorkeeper 5.6.6-2~bpo12+1
ii ruby-doorkeeper-openid-connect 1.8.7-1~bpo12+1
ii ruby-duo-api 1.3.0-2~bpo12+1
ii ruby-ed25519 1.3.0+ds-1+b4
ii ruby-elasticsearch 7.17.1-1
ii ruby-elasticsearch-api 7.17.1-1
ii ruby-elasticsearch-model 7.2.1-1
ii ruby-elasticsearch-rails 7.2.1-1
ii ruby-email-reply-trimmer 0.1.6-2
ii ruby-erubi 1.9.0-2
ii ruby-escape-utils 1.2.1-4+b3
ii ruby-excon 0.88.0-1
ii ruby-faraday 1.1.0-7
ii ruby-faraday-middleware-aws-sigv4 0.3.0-2
ii ruby-fast-blank 1.0.1-1+b4
ii ruby-ffaker 2.23.0-1~bpo12+1
ii ruby-flipper [ruby-flipper-active-sup 0.26.2-1~bpo12+1
port-cache-store]
pn ruby-flipper-active-record <none>
ii ruby-flowdock 0.7.1-1
ii ruby-fog-aliyun 0.4.0-1~bpo12+1
ii ruby-fog-aws 3.18.0-1~bpo12+1
ii ruby-fog-core 2.3.0-1
ii ruby-fog-google 1.19.0-2~bpo12+1
ii ruby-fog-local 0.8.0-2
ii ruby-fogbugz 0.3.0-2
ii ruby-fugit 1.8.1-2~bpo12+1
ii ruby-gettext-i18n-rails 1.12.0-1~bpo12+1
ii ruby-gitaly 16.11.6+ds1-2~bpo12+1
ii ruby-github-markup 1.7.0+dfsg-6
ii ruby-gitlab-experiment 0.9.1-1~bpo12+1
ii ruby-gitlab-fog-azure-rm 1.9.1-1~bpo12+1
ii ruby-gitlab-labkit 0.35.1-1~bpo12+1
ii ruby-gitlab-markup 1.9.0-1
ii ruby-gon 6.4.0-2
ii ruby-google-apis-androidpublisher-v3 0.34.0-1~bpo12+1
ii ruby-google-apis-cloudbilling-v1 0.21.0-1~bpo12+1
ii ruby-google-apis-cloudresourcemanager 0.31.0-1~bpo12+1
-v1
ii ruby-google-apis-compute-v1 0.57.0-1~bpo12+1
ii ruby-google-apis-container-v1 0.43.0-1~bpo12+1
ii ruby-google-apis-container-v1beta1 0.43.0-1~bpo12+1
ii ruby-google-apis-core 0.11.3-1~bpo12+1
ii ruby-google-apis-iam-v1 0.36.0-1~bpo12+1
ii ruby-google-apis-serviceusage-v1 0.28.0-1~bpo12+1
ii ruby-google-apis-sqladmin-v1beta4 0.41.0-1~bpo12+1
ii ruby-google-protobuf 1:3.21.12-3~bpo12+1
ii ruby-gpgme 2.0.23-1~bpo12+1
ii ruby-grape 2.0.0-1~bpo12+1
ii ruby-grape-entity 0.10.2-1~bpo12+1
ii ruby-grape-logging 1.8.4-1
ii ruby-grape-path-helpers 2.0.1-1~bpo12+1
ii ruby-graphiql-rails 1.4.10-1
ii ruby-graphlient 0.5.0-3
ii ruby-graphql 2.2.5-2~bpo12+1
ii ruby-grpc 1.51.1-3~bpo12+1
ii ruby-hamlit 2.15.1-3
ii ruby-hangouts-chat 0.0.5-2
ii ruby-hashie 5.0.0-2
ii ruby-health-check 3.0.0-1
ii ruby-html-pipeline 2.14.3-1
ii ruby-html2text 0.2.0-1.1
ii ruby-http 4.4.1-5
ii ruby-httparty 0.21.0-1
ii ruby-icalendar 2.8.0-1
ii ruby-invisible-captcha 2.1.0-1~bpo12+1
ii ruby-ipaddr 1.2.5-1~bpo12+1
ii ruby-ipynbdiff 0.4.7-1
ii ruby-jira 2.3.0-1~bpo12+1
ii ruby-js-regex 3.8.0-1
ii ruby-json 2.6.3+dfsg-1
ii ruby-json-schema 2.8.1-4
ii ruby-json-schemer 0.2.18-2
ii ruby-jsonb-accessor 1.3.10-2~bpo12+1
ii ruby-jwt 2.5.0-1
ii ruby-kaminari 1.2.2-1
ii ruby-kas-grpc 16.11.5-1~bpo12+1
ii ruby-kramdown 2.4.0-2
ii ruby-kubeclient 4.11.0-1~bpo12+1
ii ruby-licensee 9.16.1-1~bpo12+1
ii ruby-lockbox 1.3.0-1~bpo12+1
ii ruby-lograge 0.10.0-1.1
ii ruby-loofah 2.22.0-1~bpo12+1
ii ruby-lru-redux 1.1.0-2
ii ruby-mail 2.8.1+dfsg1-1~bpo12+1
ii ruby-mail-room 0.10.0+really0.0.24-1~bpo12+1
ii ruby-marginalia 1.11.1-1
ii ruby-memory-profiler 1.0.1-1~bpo12+1
ii ruby-method-source 1.0.0-2
ii ruby-mini-magick 4.13.1-1~bpo12+1
ii ruby-multi-json 1.14.1-2
ii ruby-neighbor 0.2.3-1~bpo12+1
ii ruby-net-dns [ruby-gitlab-net-dns] 0.9.2-2~bpo12+1
ii ruby-net-http-persistent 4.0.1-1~bpo12+1
ii ruby-net-ldap 0.17.1-1~bpo12+1
ii ruby-net-ntp 2.1.3-4
ii ruby-nokogiri 1.16.0+dfsg-1~bpo12+1
ii ruby-ntlm 0.6.3-2
ii ruby-oauth2 2.0.7-2~bpo12+1
ii ruby-octokit 8.1.0-1~bpo12+1
ii ruby-oj 3.14.2-1
ii ruby-oj-introspect 0.7.1-3
ii ruby-omniauth 2.1.1-1
ii ruby-omniauth-alicloud 3.0.0-2~bpo12+1
ii ruby-omniauth-atlassian-oauth2 0.2.0-2
ii ruby-omniauth-auth0 3.1.0-2~bpo12+1
ii ruby-omniauth-authentiq 0.3.3-1
ii ruby-omniauth-azure-activedirectory-v 2.0.0-1
2
ii ruby-omniauth-dingtalk-oauth2 1.0.1-1
ii ruby-omniauth-facebook 4.0.0-3~bpo12+1
ii ruby-omniauth-github 2.0.1-2
ii ruby-omniauth-gitlab 4.1.0-1
ii ruby-omniauth-google-oauth2 1.1.1-2~bpo12+1
ii ruby-omniauth-kerberos 0.3.0-3.1
ii ruby-omniauth-ldap 2.2.0-1
ii ruby-omniauth-oauth 1.2.0-2
ii ruby-omniauth-oauth2 1.8.0-1
ii ruby-omniauth-oauth2-generic 0.2.8-1~bpo12+1
ii ruby-omniauth-openid-connect 0.10.0-2
ii ruby-omniauth-saml 2.1.0-2
ii ruby-omniauth-twitter 1.4.0-1
ii ruby-openid-connect 1.3.0-1~bpo12+1
ii ruby-org 0.9.12-2.1
ii ruby-parallel 1.22.1-2
ii ruby-parslet 1.8.2-4
ii ruby-peek 1.1.0-1
ii ruby-pg 1.5.6-1~bpo12+1
ii ruby-pg-query 5.1.0-1~bpo12+1
ii ruby-posix-spawn 0.3.13-3+b5
ii ruby-premailer-rails 1.10.3-4~deb12u1
ii ruby-prof 1.4.5-2
ii ruby-progressbar 1.11.0-1
ii ruby-prometheus-client-mmap 0.23.1-1~bpo12+1
ii ruby-puma-worker-killer 0.3.1-3
ii ruby-rack 2.2.7-1~bpo12+1
ii ruby-rack-attack 6.7.0-1~bpo12+1
ii ruby-rack-cors 2.0.1-1~bpo12+1
ii ruby-rack-oauth2 1.21.3-1
ii ruby-rack-proxy 0.7.7-1~bpo12+1
ii ruby-rack-timeout 0.6.3-1
ii ruby-rails 2:6.1.7.3+dfsg-2~deb12u1
ii ruby-rails-i18n 7.0.5-1
ii ruby-rainbow 3.1.1-1
ii ruby-rbtrace 0.4.14-1+b2
ii ruby-re2 2.7.0-1~bpo12+1
ii ruby-recaptcha 5.12.3-1~bpo12+1
ii ruby-recursive-open-struct 1.1.3-1
ii ruby-redcloth 4.3.3-1~bpo12+1
ii ruby-redis 4.8.0-1
ii ruby-redis-actionpack 5.4.0-1~bpo12+1
ii ruby-redis-namespace 1.11.0-1~bpo12+1
ii ruby-redis-store 1.10.0-1~bpo12+1
ii ruby-request-store 1.5.1-1
ii ruby-responders 3.0.1-2
ii ruby-retriable 3.1.2-1
ii ruby-rouge 4.2.0-1~bpo12+1
ii ruby-rqrcode 2.2.0-1~bpo12+1
ii ruby-ruby-magic-static [ruby-ruby-mag 0.6.0-1~bpo12+1
ic]
ii ruby-ruby-openai 3.7.0-2~bpo12+1
ii ruby-ruby-parser 3.20.0-2~bpo12+1
ii ruby-rugged 1.7.1+ds-1~bpo12+1
ii ruby-saml 1.15.0-1~bpo12+1
ii ruby-sanitize 6.0.2-1~bpo12+1
ii ruby-sd-notify 0.1.1-2
ii ruby-seed-fu 2.3.7-3
ii ruby-semver-dialects 2.0.2-1~bpo12+1
ii ruby-sentry-rails 5.16.1-1~bpo12+1
ii ruby-sentry-raven 3.1.2+ds-3
ii ruby-sentry-ruby 5.16.1-3~bpo12+1
ii ruby-sentry-sidekiq 5.16.1-1~bpo12+1
ii ruby-sidekiq 7.2.1+dfsg-1~bpo12+1
ii ruby-sidekiq-cron 1.12.0-1~bpo12+1
ii ruby-slack-messenger 2.3.4-2
ii ruby-snowplow-tracker 0.8.0-1~bpo12+1
ii ruby-spamcheck 1.10.1-2~bpo12+1
ii ruby-sprockets 3.7.2-4
ii ruby-ssh-data 1.3.0-2
ii ruby-stackprof 0.2.25-1~bpo12+1
ii ruby-state-machines-activemodel 0.8.0-3
ii ruby-state-machines-activerecord 0.8.0-2
ii ruby-sys-filesystem 1.4.3-1
ii ruby-tanuki-emoji 0.9.0-1~bpo12+1
ii ruby-task-list [node-deckar01-task-li 2.3.2-2
st]
ii ruby-telesign 2.2.4-1
ii ruby-telesignenterprise 2.2.2-2
ii ruby-terser 1.1.12+dfsg-2
ii ruby-thrift 0.16.0-1~bpo12+1
ii ruby-toml-rb 2.2.0-1
ii ruby-truncato 0.7.12-1
ii ruby-typhoeus 1.4.0-3
ii ruby-unf 0.1.4-2.1
ii ruby-unf-ext 0.0.7.7-1+b4
ii ruby-unleash 3.2.5-2
ii ruby-valid-email 0.1.3-3
ii ruby-validates-hostname 1.0.13-2~bpo12+1
ii ruby-version-sorter 2.3.0-1
ii ruby-view-component 3.12.1-1~bpo12+1
ii ruby-virtus 2.0.0-1
ii ruby-vmstat 2.3.0-3+b5
ii ruby-warning 1.3.0-1
ii ruby-webauthn 3.0.0-1~bpo12+1
ii ruby-webpack-rails 0.9.11+git-1
ii ruby-webrick 1.8.1-1
ii ruby-websocket-extensions 0.1.5-2
ii ruby-whitequark-parser 3.1.3.0-1
ii ruby-wikicloth 0.8.1+dfsg-4.1
ii ruby-yajl 1.4.3-1+b2
ii ruby-zeitwerk 2.6.1-1
ii ruby-zip 2.3.2-1
ii rubygems-integration 1.18
ii sysvinit-utils [lsb-base] 3.06-4
ii ucf 3.0043+nmu1
ii webpack 5.75.0+dfsg+~cs17.16.14-1+deb12u1
ii yarnpkg 1.22.19+~cs24.27.18-2+deb12u1
Versions of packages gitlab recommends:
pn certbot <none>
ii gitaly 16.11.6+ds1-2~bpo12+1
ii openssh-server 1:9.2p1-2+deb12u3
gitlab suggests no packages.
-- Configuration Files:
/etc/gitlab/cable.yml changed:
production:
adapter: redis
url: unix:/var/run/redis/redis-server.sock
development:
adapter: redis
url: unix:/var/run/redis/redis-server.sock
test:
adapter: redis
url: unix:/var/run/redis/redis-server.sock
/etc/gitlab/puma.rb changed:
rackup 'config.ru'
pidfile "#{ENV['gitlab_pid_path']}/puma.pid"
state_path "#{ENV['gitlab_pid_path']}/puma.state"
stdout_redirect File.join(ENV['gitlab_log_dir'],"puma.stdout.log"),
File.join(ENV['gitlab_log_dir'],"puma.stderr.log"),
true
threads 1, 16
queue_requests false
bind "unix://#{ENV['gitlab_pid_path']}/gitlab.socket"
workers 1
require_relative "#{ENV['gitlab_app_root']}/lib/gitlab/cluster/lifecycle_events"
on_restart do
# Signal application hooks that we're about to restart
Gitlab::Cluster::LifecycleEvents.do_before_master_restart
end
before_fork do
# Signal to the puma killer
Gitlab::Cluster::PumaWorkerKillerInitializer.start @config.options unless
ENV['DISABLE_PUMA_WORKER_KILLER']
# Signal application hooks that we're about to fork
Gitlab::Cluster::LifecycleEvents.do_before_fork
end
Gitlab::Cluster::LifecycleEvents.set_puma_options @config.options
on_worker_boot do
# Signal application hooks of worker start
Gitlab::Cluster::LifecycleEvents.do_worker_start
end
preload_app!
tag 'gitlab-puma-worker'
worker_timeout 60
require_relative
"#{ENV['gitlab_app_root']}/lib/gitlab/puma_logging/json_formatter"
json_formatter = Gitlab::PumaLogging::JSONFormatter.new
log_formatter do |str|
json_formatter.call(str)
end
/etc/gitlab/resque.yml changed:
development: redis://localhost:6379
test: redis://localhost:6379
production: unix:/var/run/redis/redis-server.sock
-- debconf information:
gitlab/pgsql/no-empty-passwords:
gitlab/db/app-user: forge@localhost
gitlab/missing-db-package-error: abort
gitlab/pgsql/manualconf:
gitlab/upgrade-error: abort
* gitlab/database-type: pgsql
gitlab/remote/newhost: localhost
gitlab/upgrade-backup: true
gitlab/pgsql/admin-user: postgres
gitlab/pgsql/method: TCP/IP
gitlab/install-error: abort
gitlab/pgsql/authmethod-user: password
* gitlab/remote/host: localhost
gitlab/remove-error: abort
gitlab/remote/port:
gitlab/dbconfig-remove: true
gitlab/letsencrypt_email:
gitlab/internal/reconfiguring: false
* gitlab/ssl: true
gitlab/dbconfig-upgrade: true
gitlab/passwords-do-not-match:
gitlab/pgsql/changeconf: false
gitlab/internal/skip-preseed: false
gitlab/purge_data: true
gitlab/letsencrypt: false
* gitlab/dbconfig-install: true
* gitlab/dbconfig-reinstall: false
gitlab/db/dbname: gitlab_production
* gitlab/fqdn: forge.example.com
gitlab/purge: false
gitlab/pgsql/authmethod-admin: ident
