Funny, I was going to implement this feature soon. There is a stale merge request that I was going to resurrect:
https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/253 The Rack Attack configuration only whitelists your IP from being banned in case of failed authentication attempts, so that's not helpful. If you're running the omnibus version of GitLab, I don't believe there's a way to configure the embedded nginx server to use HTTP Basic Authentication. You have a few options: 1) Temporarily modify the gitlab-http.conf to add HTTP authentication (at least until this feature is available, although I'm not promising anything! :) ) 2) Run your own Web server for GitLab <https://gitlab.com/gitlab-org/gitlab-recipes/tree/master/web-server> 3) Run a reverse proxy in front of GitLab (or your own nginx server) If you choose option 2 or 3, you could also consider bitly's Google Auth Proxy <https://github.com/bitly/google_auth_proxy> to restrict access to your GitLab instance. On Fri, May 1, 2015 at 11:28 AM, Alan Bailward <arcte...@gmail.com> wrote: > I'm wondering if there's a way to restrict signup for my just-installed > version of the community GitLab? I'd like to only allow signups to my own > group of developers wither by: > > - Only allowing @mydomain.com users to create accounts > - Hiding the site behind http authentication > > Maybe I'm missing something but I don't see how to do either of these. > There's a 'whitelist' with "rack_attack_git_basic_auth", but that doesn't > seem to work (in fact putting my own IP in there just seems to redirect me > to www.domain.com (the gitlab is setup as code.domain.com)), and if > possible I'd like to hide the site behind simple http auth without doing > something crazy and custom. > > Anyone have any pointers? > > -- > You received this message because you are subscribed to the Google Groups > "GitLab" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to gitlabhq+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/gitlabhq/5006f186-ac77-41c5-8383-c0d3b83b04c3%40googlegroups.com > <https://groups.google.com/d/msgid/gitlabhq/5006f186-ac77-41c5-8383-c0d3b83b04c3%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "GitLab" group. To unsubscribe from this group and stop receiving emails from it, send an email to gitlabhq+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/gitlabhq/CAMBWrQkpQZ_onKRQTmZVfWdr4bj3HfhkL-7yOO7w_Mq1mk6rJg%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
