I finally have this working :-O I started with getting official certs for everything. Then had to add our trust chain to the Docker image trust store.
Here is some relevant bits from the Discourse app.yml: ## GitLab OmniAuth settings > > GITLAB_APP_ID: foo > > GITLAB_SECRET: bar > > GITLAB_URL: https://xxx.yyy.zzz > > >> ## The Docker container is stateless; all data is stored in /shared > > volumes: > > - volume: > > host: /var/discourse/shared/standalone > > guest: /shared > > - volume: > > host: /var/discourse/shared/standalone/log/var-log > > guest: /var/log > > >> ## Plugins go here > > ## see https://meta.discourse.org/t/19157 for details > > hooks: > > after_code: > > - exec: > > cd: $home/plugins > > cmd: > > - git clone https://github.com/discourse/docker_manager.git > > - git clone >> https://gitlab.com/gitlab-org/discourse-omniauth-gitlab.git > > run: > > - exec: echo "Beginning of custom commands" > > ## If you want to set the 'From' email address for your first >> registration, uncomment and change: > > ## After getting the first signup email, re-comment the line. It >> only needs to run once. > > #- exec: rails r >> "SiteSetting.notification_email='i...@unconfigured.discourse.org'" > > >> - exec: apt install unzip > > - exec: unzip /shared/ssl/NTAM_Collection_Ubuntu_2016.2.zip -d >> /usr/local/share/ca-certificates/ > > - exec: chmod 444 /usr/local/share/ca-certificates/* > > - exec: c_rehash /usr/local/share/ca-certificates > > - exec: update-ca-certificates > > >> - exec: echo "End of custom commands" > > On Wednesday, July 6, 2016 at 3:04:41 PM UTC-7, Mark Moorcroft wrote: > > > I think I have this plugin 90% working. But nothing tells you what the > "sso url" should be in Discourse. > -- You received this message because you are subscribed to the Google Groups "GitLab" group. To unsubscribe from this group and stop receiving emails from it, send an email to gitlabhq+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/gitlabhq/c2ef55da-aa40-4ed0-90b5-176c65dd7b81%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.