Mastering GitLab 12

Rack Attack

An import part of internet security nowadays are built-in throttling mechanisms to counter denial-of-service attacks. GitLab uses the Rack Attack Gem that can keep an eye on the number of requests coming from individual IPs. You can disable it here and set a whitelist and some thresholds:

rack_attack:   git_basic_auth:    enabled: true     ip_whitelist: ["127.0.0.1"]     

You can limit the number of Git HTTP authentication attempts:

maxretry: 10

After 60 seconds, the auth attempt counter will be reset:

findtime: 60

You can also ban an IP for one hour (3,600 seconds); for example, after too many auth attempts:

bantime: 3600

We have reached the end of the gitlab.yml file. After restarting GitLab, the changes will become active. There are other ...