41 lines
1.2 KiB
Ruby
41 lines
1.2 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
namespace :gitlab do
|
|
namespace :two_factor do
|
|
desc "GitLab | 2FA | Disable Two-factor authentication (2FA) for all users"
|
|
task disable_for_all_users: :gitlab_environment do
|
|
scope = User.with_two_factor
|
|
count = scope.count
|
|
|
|
if count > 0
|
|
puts "This will disable 2FA for #{count.to_s.color(:red)} users..."
|
|
|
|
begin
|
|
ask_to_continue
|
|
scope.find_each(&:disable_two_factor!)
|
|
puts "Successfully disabled 2FA for #{count} users.".color(:green)
|
|
rescue Gitlab::TaskAbortedByUserError
|
|
puts "Quitting...".color(:red)
|
|
end
|
|
else
|
|
puts "There are currently no users with 2FA enabled.".color(:yellow)
|
|
end
|
|
end
|
|
|
|
namespace :rotate_key do
|
|
def rotator
|
|
@rotator ||= Gitlab::OtpKeyRotator.new(ENV['filename'])
|
|
end
|
|
|
|
desc "GitLab | 2FA | Rotate Key | Encrypt user OTP secrets with a new encryption key"
|
|
task apply: :environment do |t, args|
|
|
rotator.rotate!(old_key: ENV['old_key'], new_key: ENV['new_key'])
|
|
end
|
|
|
|
desc "GitLab | 2FA | Rotate Key | Rollback to secrets encrypted with the old encryption key"
|
|
task rollback: :environment do
|
|
rotator.rollback!
|
|
end
|
|
end
|
|
end
|
|
end
|