Commit baf81d4b authored by James T. Lee's avatar James T. Lee
Browse files

gitlab: Add comments

parent 66ff0224
...@@ -45,6 +45,8 @@ class nest::service::gitlab { ...@@ -45,6 +45,8 @@ class nest::service::gitlab {
require => Docker_network['gitlab'], require => Docker_network['gitlab'],
} }
# Docker's IPv6 support expects public addresses
# so it doesn't set up a NAT automatically
firewall { '100 gitlab nat': firewall { '100 gitlab nat':
table => nat, table => nat,
chain => 'POSTROUTING', chain => 'POSTROUTING',
...@@ -53,6 +55,8 @@ class nest::service::gitlab { ...@@ -53,6 +55,8 @@ class nest::service::gitlab {
provider => ip6tables, provider => ip6tables,
} }
# Use iptables to forward the SSH service to avoid listener conflicts
# with Docker's own port exposure method, and to support IPv6
nest::lib::port_forward { 'gitlab ssh': nest::lib::port_forward { 'gitlab ssh':
port => 22, port => 22,
proto => tcp, proto => tcp,
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment