debian-mirror-gitlab/config/initializers/session_store.rb

24 lines
974 B
Ruby
Raw Normal View History

2014-09-02 18:07:02 +05:30
# Be sure to restart your server when you modify this file.
2015-09-11 14:41:01 +05:30
require 'gitlab/current_settings'
include Gitlab::CurrentSettings
2015-09-25 12:07:36 +05:30
2015-11-26 14:37:03 +05:30
# allow it to fail: it may do so when create_from_defaults is executed before migrations are actually done
2015-09-25 12:07:36 +05:30
begin
2015-11-26 14:37:03 +05:30
Settings.gitlab['session_expire_delay'] = current_application_settings.session_expire_delay || 10080
2015-09-25 12:07:36 +05:30
rescue
2015-11-26 14:37:03 +05:30
Settings.gitlab['session_expire_delay'] ||= 10080
2015-09-25 12:07:36 +05:30
end
2015-09-11 14:41:01 +05:30
2015-11-26 14:37:03 +05:30
unless Rails.env.test?
Gitlab::Application.config.session_store(
:redis_store, # Using the cookie_store would enable session replay attacks.
servers: Gitlab::Application.config.cache_store[1].merge(namespace: 'session:gitlab'), # re-use the Redis config from the Rails cache store
key: '_gitlab_session',
secure: Gitlab.config.gitlab.https,
httponly: true,
expire_after: Settings.gitlab['session_expire_delay'] * 60,
path: (Gitlab::Application.config.relative_url_root.nil?) ? '/' : Gitlab::Application.config.relative_url_root
)
end