docker - Gitlab CE引发错误，Web IDE卡在nginx反向pxy(jwilder)后面

Question

我是新来的。

我在反向代理(jwilder的Docker / nginx-letsencrypt)后面有一个gitlab CE(Docker)的奇怪错误，当图像端口80和443直接映射到主机端口时，相同的Docker Image运行时没有任何错误。到Web端的http调用起作用。代理后面的同一图像，其中为gitlab设置了VIRTUAL_PORT = 80，并且通过代理公开了443 + 80)。一切正常，只是不加载Web端。

不明白为什么没有代理ssl的gitlab Web ide可以与不安全的http一起使用？不能只使用http运行gitlab ;-)

Chrome的错误输出:

vue-resource.esm.js:1086 Mixed Content: The page at 'https://lab.flockcode.com/-/ide/project/flockcode/flockcode_homepage/edit/master/.gitlab-ci.yml' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://lab.flockcode.com/flockcode/flockcode_homepage/files/master?format=json'. This request has been blocked; the content must be served over HTTPS.
(anonymous) @ vue-resource.esm.js:1086
r @ vue-resource.esm.js:196
X @ vue-resource.esm.js:1032
Q @ vue-resource.esm.js:1190
c @ vue-resource.esm.js:1147
l @ vue-resource.esm.js:1173
V @ vue-resource.esm.js:990
c @ vue-resource.esm.js:1147
l @ vue-resource.esm.js:1173
K @ vue-resource.esm.js:1004
c @ vue-resource.esm.js:1147
l @ vue-resource.esm.js:1173
z @ vue-resource.esm.js:977
c @ vue-resource.esm.js:1147
l @ vue-resource.esm.js:1173
U @ vue-resource.esm.js:880
c @ vue-resource.esm.js:1147
l @ vue-resource.esm.js:1173
H @ vue-resource.esm.js:865
c @ vue-resource.esm.js:1147
l @ vue-resource.esm.js:1173
G @ vue-resource.esm.js:1024
c @ vue-resource.esm.js:1147
l @ vue-resource.esm.js:1173
q @ vue-resource.esm.js:846
c @ vue-resource.esm.js:1147
l @ vue-resource.esm.js:1173
(anonymous) @ vue_resource_interceptor.js:13
c @ vue-resource.esm.js:1147
l @ vue-resource.esm.js:1173
(anonymous) @ vue_resource_interceptor.js:24
c @ vue-resource.esm.js:1147
(anonymous) @ vue-resource.esm.js:1176
r @ vue-resource.esm.js:196
t @ vue-resource.esm.js:1140
oe @ vue-resource.esm.js:1397
oe.(anonymous function) @ vue-resource.esm.js:1428
getFiles @ index.js:72
(anonymous) @ tree.js:59
Rn @ tree.js:53
(anonymous) @ vuex.esm.js:704
P.dispatch @ vuex.esm.js:426
P.dispatch @ vuex.esm.js:332
(anonymous) @ ide_router.js:72
Promise.then (async)
(anonymous) @ ide_router.js:62
p @ vue-router.esm.js:1943
r @ vue-router.esm.js:1717
ue @ vue-router.esm.js:1725
nn.confirmTransition @ vue-router.esm.js:1972
nn.transitionTo @ vue-router.esm.js:1874
sn.init @ vue-router.esm.js:2494
beforeCreate @ vue-router.esm.js:540
Re @ vue.esm.js:2895
e._init @ vue.esm.js:4556
At @ vue.esm.js:4659
(anonymous) @ index.js:10
./ide/index.js @ index.js:22
r @ bootstrap cc923a667f9c8788713a:54
window.webpackJsonp @ bootstrap cc923a667f9c8788713a:25
(anonymous) @ ide.436113d38b71e60d098b.bundle.js:1
.gitlab-ci.yml:1 Uncaught (in promise) je {url: "http://lab.flockcode.com/flockcode/flockcode_homepage/files/master?format=json", ok: false, status: 0, statusText: "", headers: {…}, …}

由于我不知道从哪里开始，所以我尝试了各种/etc/gitlab/gitlab.rb设置(包括取消注释X header 部分而没有任何效果)a，并且该容器需要相当长的时间才能重新启动，所以请您寻求帮助。 。提前。

Answer 1

也许我也遇到同样的问题。

反向代理(nginx)

带有Letsencrypt证书

的

Gitlab-ce docker容器

首先，我使用“HTTP”设置了external_url
那么除了Web IDE之外，其他一切正常

https://docs.gitlab.com/omnibus/settings/nginx.html#supporting-proxied-ssl

默认情况下，如果external_url包含https://，NGINX将自动检测是否使用SSL。如果您在反向代理后面运行GitLab，则可能希望在另一个代理服务器或负载平衡器处终止SSL。为此，请确保external_url包含 https:// 并将以下配置应用于gitlab.rb:

所以，我在external_url中将http-> https更改为false

external_url' https ://gitlab.example.com'
nginx ['listen_https'] = 假

那对我来说一切都很好。

可能对您有帮助

http://blog.hangadac.com