First attempt at adding a gitlab-dev instance

files/gitlab/database.yml

@@ -0,0 +1,10 @@
+production:
+  adapter: mysql2
+  encoding: utf8
+  reconnect: false
+  database: gitlabhq_production
+  pool: 5
+  username: gitlab
+  password: "$database_password"
+  # host: localhost
+  #   # socket: /tmp/mysql.sock

files/gitlab/gitlab-worker.service

@@ -0,0 +1,13 @@
+[Unit]
+Description=Gitlab Resque Worker
+Requires=redis.service
+After=redis.service
+Wants=postfix.service mysqld.service
+
+[Service]
+Type=forking
+User=gitlab
+WorkingDirectory=/home/gitlab/gitlab
+ExecStart=/bin/sh -c "RAILS_ENV=production bundle exec rake sidekiq:start"
+ExecStopPost=/bin/sh -c "RAILS_ENV=production bundle exec rake sidekiq:stop"
+PIDFile=/home/gitlab/gitlab/tmp/pids/sidekiq.pid

files/gitlab/gitlab.service

@@ -0,0 +1,15 @@
+[Unit]
+Description=Gitlab Unicorn
+Requires=redis.service mysqld.service
+After=redis.service mysqld.service
+Wants=postfix.service mysqld.service gitlab-worker.service
+
+[Service]
+Type=simple
+User=gitlab
+WorkingDirectory=/home/gitlab/gitlab
+ExecStart=/bin/sh -c "bundle exec unicorn_rails -c /home/gitlab/gitlab/config/unicorn.rb -E production"
+PIDFile=/home/gitlab/gitlab/tmp/pids/unicorn.pid
+
+[Install]
+WantedBy=multi-user.target

files/gitlab/iptables

@@ -0,0 +1,14 @@
+*filter
+:INPUT ACCEPT [0:0]
+:FORWARD ACCEPT [0:0]
+:OUTPUT ACCEPT [0:0]
+-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
+-A INPUT -p icmp -j ACCEPT
+-A INPUT -i lo -j ACCEPT
+-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
+-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
+
+-A INPUT -j REJECT --reject-with icmp-host-prohibited
+-A FORWARD -j REJECT --reject-with icmp-host-prohibited
+COMMIT
+

files/gitlab/unicorn.rb

@@ -0,0 +1,68 @@
+# uncomment and customize to run in non-root path
+# note that config/gitlab.yml web path should also be changed
+# ENV['RAILS_RELATIVE_URL_ROOT'] = "/gitlab"
+
+app_dir = "/home/gitlab/gitlab/"
+worker_processes 2
+working_directory app_dir
+
+# Load app into the master before forking workers for super-fast
+# worker spawn times
+preload_app true
+
+# nuke workers after 30 seconds (60 is the default)
+timeout 30
+
+# listen on a Unix domain socket and/or a TCP port,
+
+listen 3000 # listen to port 8080 on all TCP interfaces
+#listen "127.0.0.1:8080"  # listen to port 8080 on the loopback interface
+listen "#{app_dir}/tmp/sockets/gitlab.socket"
+
+pid "#{app_dir}/tmp/pids/unicorn.pid"
+stderr_path "#{app_dir}/log/unicorn.stderr.log"
+stdout_path "#{app_dir}/log/unicorn.stdout.log"
+
+# http://www.rubyenterpriseedition.com/faq.html#adapt_apps_for_cow
+if GC.respond_to?(:copy_on_write_friendly=)
+  GC.copy_on_write_friendly = true
+end
+
+
+before_fork do |server, worker|
+  # the following is highly recomended for Rails + "preload_app true"
+  # as there's no need for the master process to hold a connection
+  defined?(ActiveRecord::Base) and ActiveRecord::Base.connection.disconnect!
+
+  ##
+  # When sent a USR2, Unicorn will suffix its pidfile with .oldbin and
+  # immediately start loading up a new version of itself (loaded with a new
+  # version of our app). When this new Unicorn is completely loaded
+  # it will begin spawning workers. The first worker spawned will check to
+  # see if an .oldbin pidfile exists. If so, this means we've just booted up
+  # a new Unicorn and need to tell the old one that it can now die. To do so
+  # we send it a QUIT.
+  #
+  # Using this method we get 0 downtime deploys.
+
+  old_pid = "#{server.config[:pid]}.oldbin"
+
+  if File.exists?(old_pid) && server.pid != old_pid
+    begin
+      sig = (worker.nr + 1) >= server.worker_processes ? :QUIT : :TTOU
+      Process.kill(sig, File.read(old_pid).to_i)
+    rescue Errno::ENOENT, Errno::ESRCH
+      # someone else did our job for us
+    end
+  end
+end
+
+after_fork do |server, worker|
+  # Unicorn master loads the app then forks off workers - because of the way
+  # Unix forking works, we need to make sure we aren't using any of the parent's
+  # sockets, e.g. db connection
+
+  defined?(ActiveRecord::Base) and ActiveRecord::Base.establish_connection
+  # Redis and Memcached would go here but their connections are established
+  # on demand, so the master never opens a socket
+end

files/gitlab/vhost.conf

@@ -0,0 +1,15 @@
+<VirtualHost *:80>
+  ServerName gitlab-dev.cloud.fedoraproject.org
+
+  # Uncomment if you want redirect from HTTP to HTTPS
+  #RewriteEngine on
+  #RewriteCond %{SERVER_PORT} ^80$
+  #RewriteRule ^(.*)$ https://%{SERVER_NAME}$1 [L,R]
+
+  ProxyPass / http://127.0.0.1:3000/
+  ProxyPassReverse / http://127.0.0.1:3000/
+  ProxyPreserveHost On
+
+  #CustomLog logs/httpd/gitlab-access.log combined
+  #ErrorLog logs/httpd/gitlab-error.log
+</VirtualHost>