gitlab-org--gitlab-foss/config/initializers
Sean McGivern 405379bbfc Store OTP secret key in secrets.yml
.secret stores the secret token used for both encrypting login cookies
and for encrypting stored OTP secrets. We can't rotate this, because
that would invalidate all existing OTP secrets.

If the secret token is present in the .secret file or an environment
variable, save it as otp_key_base in secrets.yml. Now .secret can be
rotated without invalidating OTP secrets.

If the secret token isn't present (initial setup), then just generate a
separate otp_key_base and save in secrets.yml.

Update the docs to reflect that secrets.yml needs to be retained past
upgrades, but .secret doesn't.
2016-08-03 15:46:37 +01:00
..
1_settings.rb Profile requests when a header is passed 2016-07-26 20:06:09 +02:00
2_app.rb Add release tracking for Sentry 2016-02-17 14:05:58 -05:00
4_ci_app.rb Use new runners registration token to register CI runners 2015-12-11 10:39:39 +01:00
5_backend.rb Fix a few places where autoloading would fail 2016-05-10 11:51:19 +02:00
6_validations.rb Add ENV variable to skip repository storages validations 2016-07-25 13:48:40 -04:00
active_record_query_trace.rb Added active_record_query_trace 2015-10-15 12:05:01 +02:00
attr_encrypted_no_db_connection.rb Fix. 2015-05-15 15:32:49 +02:00
backtrace_silencers.rb
bullet.rb Added Bullet to the Gemfile 2015-10-15 12:05:01 +02:00
carrierwave.rb Codestyle: make sure we have space around operators 2016-05-13 04:46:56 -03:00
chronic_duration.rb Enable exceptions on ChronicDuration 2016-06-13 11:03:30 +01:00
connection_fix.rb Groundwork for merging CI into CE 2015-08-25 18:42:46 -07:00
cookies_serializer.rb Rails update to 4.2.4 2015-11-25 18:18:44 +02:00
date_time_formats.rb Add two custom Date/Time conversion formats 2016-01-07 20:01:08 -05:00
default_url_options.rb Fix images in emails 2016-06-16 11:47:01 +01:00
devise.rb Enable Style/SpaceAfterComma Rubocop cop 2016-06-29 15:23:44 +02:00
devise_password_length.rb.example Add instructions for custom password length limits 2014-01-13 10:41:10 +01:00
disable_email_interceptor.rb Revert "Allow to configure smtp and sendmail in gitlab.yml" 2015-05-06 17:39:18 +03:00
doorkeeper.rb Improve Gitlab::Auth method names 2016-06-10 14:51:16 +02:00
gitlab_shell_secret_token.rb Create (if necessary) and link the gitlab-shell secret file on the rake install task 2016-06-29 22:30:33 -04:00
go_get.rb Revert "Revert "Merge branch 'support-go-subpackages' into 'master' "" 2016-03-12 21:05:23 +00:00
gollum.rb Support Wiki with UTF-8 page name 2016-03-16 02:17:07 +09:00
hamlit.rb Restrict hamlit version, remove coffeescript filters. 2016-06-23 15:54:23 -06:00
health_check.rb Update the health_check gem to the latest release 2016-07-11 09:30:47 -07:00
inflections.rb Create table for award emoji 2016-05-06 10:47:11 +02:00
kaminari_config.rb
metrics.rb Instrument the Repository class 2016-08-02 13:30:13 +02:00
mime_types.rb Don't allow `.ogg` as a valid video extension 2016-07-21 08:56:57 +02:00
mysql_ignore_postgresql_options.rb Patch MySQL to ignore PostgreSQL schema options 2016-03-11 15:25:22 -05:00
omniauth.rb Add leading comment space cop 2016-05-31 19:33:46 -03:00
postgresql_limit_fix.rb patch rails to ignore text limit 2012-10-10 13:17:48 +04:00
postgresql_opclasses_support.rb Disable Rubocop for PostgreSQL patches 2016-03-11 15:25:23 -05:00
premailer.rb Don't remove IDs via premailer 2016-05-25 16:56:06 -04:00
public_key.rb Fix typo. 2015-03-20 16:13:03 -07:00
rack_attack.rb.example Import from Github using Personal Access Tokens. 2016-06-30 18:48:17 +02:00
rack_attack_git_basic_auth.rb Disable Rack Attack if admin disables it in config file 2016-04-27 07:22:02 -07:00
rack_lineprof.rb Rails update to 4.2.4 2015-11-25 18:18:44 +02:00
relative_naming_ci_namespace.rb Improve manual actions code and add model, service and feature tests 2016-07-18 14:46:20 +02:00
relative_url.rb.sample Use dedicated relative_url.rb initializer 2016-02-29 21:17:48 +01:00
request_profiler.rb Fix RequestProfiler::Middleware error when code is reloaded in development 2016-08-01 14:26:11 +02:00
secret_token.rb Store OTP secret key in secrets.yml 2016-08-03 15:46:37 +01:00
sentry.rb Prevent Rails filtered parameters from leaking to Sentry. 2016-04-28 15:08:23 -06:00
session_store.rb Enable Style/RedundantParentheses rubocop cop 2016-05-30 15:07:18 +02:00
sherlock.rb Rails update to 4.2.4 2015-11-25 18:18:44 +02:00
sidekiq.rb Enable SIDEKIQ_REQUEST_STORE by default 2016-07-25 18:05:14 -07:00
smtp_settings.rb.sample Add SMTP as default delivery method to match gitlab-org/omnibus-gitlab!826 2016-06-24 11:56:52 -07:00
static_files.rb Migrate mailers to ActiveJob 2015-11-26 17:03:43 +02:00
time_zone.rb Add timezone configuration to gitlab.yml 2014-10-21 11:27:16 +02:00
trusted_proxies.rb Ignore invalid IPs in X-Forwarded-For when trusted proxies are configured. 2016-07-31 15:36:11 -04:00
wrap_parameters.rb