GitLab

gitlab.project-open.net is a server that handles ]po[ versioning and CI/CD pipelines.

Services

• CVSD server
• GitLab

Both services are externally accessible.

Network

Router -> [IPFire] -> HAProxy -> GitLab

• [IPFire] - Add a new firewall rule:
  
• Source: Standard networks: Any
• Destination: Firewall: RED
• Protocol: TCP
• Destination Port: 722
  
• Action: Accept
• Remark: Red: Allow #722 to #22 forward to GitLab
• Rule position: 4
  
• Activate rule: OK
  
  
•  [IPFire] - HAProxy:
  

  listen git
      bind *:722
      timeout connect  4000
      timeout client   180000
      timeout server   180000
      server gitlab gitlab:22