Merge pull request 'gerrit01: make it go brrr on https clone' (#17) from gerrit-http-clones into main

Reviewed-on: delroth/bagel-infra#17
This commit is contained in:
raito 2024-07-04 12:43:18 +00:00
commit e148d54b18
2 changed files with 8 additions and 4 deletions

View file

@ -76,11 +76,12 @@ in
database.poolLimit = "250"; database.poolLimit = "250";
database.poolMaxIdle = 16; database.poolMaxIdle = 16;
http.maxThreads = 100; http.maxThreads = 100;
# core.packedGitLimit = "4g"; core.packedGitLimit = "4g";
# core.packedGitWindowSize = "16k"; core.packedGitWindowSize = "16k";
# core.packedGitOpenFiles = "4096"; core.packedGitOpenFiles = "4096";
receive.timeout = "4min"; receive.timeout = "4min";
# pack.threads = "8"; transfer.timeout = "4min";
pack.threads = "8";
log.jsonLogging = true; log.jsonLogging = true;
log.textLogging = false; log.textLogging = false;
sshd.advertisedAddress = "cl.forkos.org:29418"; sshd.advertisedAddress = "cl.forkos.org:29418";

View file

@ -11,6 +11,7 @@ in
appendHttpConfig = '' appendHttpConfig = ''
add_header Permissions-Policy "interest-cohort=()"; add_header Permissions-Policy "interest-cohort=()";
''; '';
recommendedProxySettings = false;
}; };
services.nginx.virtualHosts.gerrit = { services.nginx.virtualHosts.gerrit = {
serverName = builtins.head cfg.domains; serverName = builtins.head cfg.domains;
@ -24,6 +25,8 @@ in
proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-For $remote_addr;
# The :443 suffix is a workaround for https://b.tvl.fyi/issues/88. # The :443 suffix is a workaround for https://b.tvl.fyi/issues/88.
proxy_set_header Host $host:443; proxy_set_header Host $host:443;
# Gerrit can throw a lot of data.
proxy_buffering off;
} }
location = /robots.txt { location = /robots.txt {