--- Class[Gitlab].orig
+++ Class[Gitlab]
@@
- custom_nginx_config => ['location ~* ^(?:(?!admin).)*/runners/(1484|1504)/edit$ {\n deny all;\n}\n']
+ custom_nginx_config => ['location ~* ^(?:(?!admin).)*/runners/(1484|1504)/edit$ {\n deny all;\n}\n', 'location ~ ^/api/v4(?:/|$) {\n if ($http_user_agent ~* "Chrome\\/[0-9]{1,2}\\.") { return 403; }\n if ($http_user_agent ~* "Chrome\\/1([0-1][0-9]|2[0-5])\\.") { return 403; }\n}\n', 'location = /api/graphql {\n if ($http_user_agent ~* "Chrome\\/[0-9]{1,2}\\.") { return 403; }\n if ($http_user_agent ~* "Chrome\\/1([0-1][0-9]|2[0-5])\\.") { return 403; }\n}\n']
Class[Profile::Gitlab]
- Parameters differences:
--- Class[Profile::Gitlab].orig
+++ Class[Profile::Gitlab]
@@
- custom_nginx_config => ['location ~* ^(?:(?!admin).)*/runners/(1484|1504)/edit$ {\n deny all;\n}\n']
+ custom_nginx_config => ['location ~* ^(?:(?!admin).)*/runners/(1484|1504)/edit$ {\n deny all;\n}\n', 'location ~ ^/api/v4(?:/|$) {\n if ($http_user_agent ~* "Chrome\\/[0-9]{1,2}\\.") { return 403; }\n if ($http_user_agent ~* "Chrome\\/1([0-1][0-9]|2[0-5])\\.") { return 403; }\n}\n', 'location = /api/graphql {\n if ($http_user_agent ~* "Chrome\\/[0-9]{1,2}\\.") { return 403; }\n if ($http_user_agent ~* "Chrome\\/1([0-1][0-9]|2[0-5])\\.") { return 403; }\n}\n']
- File[/etc/gitlab/gitlab.rb]
- Content differences:
--- /etc/gitlab/gitlab.rb.orig
+++ /etc/gitlab/gitlab.rb
@@ -199,7 +199,7 @@
'SSL_CERT_DIR' => '/etc/ssl/certs',
}
-nginx['custom_gitlab_server_config'] = "location ~* ^(?:(?!admin).)*/runners/(1484|1504)/edit$ {\n deny all;\n}\n"
+nginx['custom_gitlab_server_config'] = "location ~* ^(?:(?!admin).)*/runners/(1484|1504)/edit$ {\n deny all;\n}\n\nlocation ~ ^/api/v4(?:/|$) {\n if ($http_user_agent ~* \"Chrome\\/[0-9]{1,2}\\.\") { return 403; }\n if ($http_user_agent ~* \"Chrome\\/1([0-1][0-9]|2[0-5])\\.\") { return 403; }\n}\n\nlocation = /api/graphql {\n if ($http_user_agent ~* \"Chrome\\/[0-9]{1,2}\\.\") { return 403; }\n if ($http_user_agent ~* \"Chrome\\/1([0-1][0-9]|2[0-5])\\.\") { return 403; }\n}\n"
logging['logrotate_frequency'] = "daily"
logging['logrotate_maxsize'] = "5G"
Relevant files