I finally have this working :-O I started with getting official certs for
everything. Then had to add our trust chain to the Docker image trust store.
Here is some relevant bits from the Discourse app.yml:
## GitLab OmniAuth settings
>
> GITLAB_APP_ID: foo
>
> GITLAB_SECRET: bar
>
> GITLAB_URL: https://xxx.yyy.zzz
>
>
>> ## The Docker container is stateless; all data is stored in /shared
>
> volumes:
>
> - volume:
>
> host: /var/discourse/shared/standalone
>
> guest: /shared
>
> - volume:
>
> host: /var/discourse/shared/standalone/log/var-log
>
> guest: /var/log
>
>
>> ## Plugins go here
>
> ## see https://meta.discourse.org/t/19157 for details
>
> hooks:
>
> after_code:
>
> - exec:
>
> cd: $home/plugins
>
> cmd:
>
> - git clone https://github.com/discourse/docker_manager.git
>
> - git clone
>> https://gitlab.com/gitlab-org/discourse-omniauth-gitlab.git
>
> run:
>
> - exec: echo "Beginning of custom commands"
>
> ## If you want to set the 'From' email address for your first
>> registration, uncomment and change:
>
> ## After getting the first signup email, re-comment the line. It
>> only needs to run once.
>
> #- exec: rails r
>> "SiteSetting.notification_email='[email protected]'"
>
>
>> - exec: apt install unzip
>
> - exec: unzip /shared/ssl/NTAM_Collection_Ubuntu_2016.2.zip -d
>> /usr/local/share/ca-certificates/
>
> - exec: chmod 444 /usr/local/share/ca-certificates/*
>
> - exec: c_rehash /usr/local/share/ca-certificates
>
> - exec: update-ca-certificates
>
>
>> - exec: echo "End of custom commands"
>
>
On Wednesday, July 6, 2016 at 3:04:41 PM UTC-7, Mark Moorcroft wrote:
>
>
> I think I have this plugin 90% working. But nothing tells you what the
> "sso url" should be in Discourse.
>
--
You received this message because you are subscribed to the Google Groups
"GitLab" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/gitlabhq/c2ef55da-aa40-4ed0-90b5-176c65dd7b81%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
