Evaluate GitLab

Securepub SPA on GitLab Securepub Status on GitLab

• Review GitLab
• Setup securepub account on GitLab
• Test GitLab Pages with custom domain

Goals

• Find a suitable host for Securepub SPA and Securepub Status page.
• Determine if GitLab can meet this need.

Requirements

• Must allow custom domain
• CSP must not prohibit pages from accessing goatcounter.com and userbase.com

Steps Taken

■ Review GitLab materials
  ■ https://handbook.gitlab.com/handbook/legal/subscription-agreement
  ■ https://about.gitlab.com/pricing
  ■ https://docs.gitlab.com/ee/user/project/pages/getting_started/pages_ui.html
  ■ https://docs.gitlab.com/ee/user/project/pages/custom_domains_ssl_tls_certification/
  ■ https://docs.gitlab.com/ee/user/project/pages/custom_domains_ssl_tls_certification/lets_encrypt_integration.html
  ■ https://gitlab.com/pages/plain-html

■ Setup GitLab account
  ■ Create ssh key for GitLab
  ■ Update .ssh/config
    Host gitlab.com
         User securepub
         IdentityFile ~/.ssh/id_gitlab_securepub_ed25519.key
         HostName gitlab.com

■ Test GitLab pages
  ■ Create test repo in GitLab ui
  ■ Create + push files to test repo
    ■ public/ directory already populated

  ■ use GitLab pages via 'Deploy > Pages' in GitLab ui.
    ■ create .gitlab-ci.yml using example from https://gitlab.com/pages/plain-html
      
      image: busybox
      pages:
        stage: deploy
        script:
        - echo 'Nothing to do...'
        artifacts:
          paths:
          - public
          expire_in: 1 day
        rules:
          - if: $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH
  
    ■ Select Deploy > Pages.
      - test url appears to work
    

■ Test GitLab pages with custom domain
  ■ Select Deploy > Pages.
  ■ In the upper-right corner, select New Domain.
  ■ In Domain, enter the domain name. 
    app3.securepub.org

  ■ copy details
    Domain              http://app3.securepub.org
    DNS                 app3.securepub.org ALIAS securepub.gitlab.io.
    Verification        _gitlab-pages-verification-code.app3.securepub.org TXT gitlab-pages-verification-code=...

  ■ choose
    Certificate         ( x) Automatic certificate management using Let's Encrypt 

■ update DNS

    Type      Domain                     Data                   TTL        
    ───────── ────────────────────────── ────────────────────── ─────────
    A         app3.securepub.org         35.185.44.232          5 minutes
    TXT       _gitlab-pages-veri         gitlab-pages-ver       5 minutes
              fication-code.app3         ification-code=...
              .securepub.org

■ click circular arrow on Verification status, observe
  Successfully verified domain ownership

■ open http://app3.securepub.org ╶╶╶╶╶╶╶ note not https
  - appears to work
    
■ periodically check if SSL certificate from Let's Encrypt was assigned
  - eventually gitlab interface shows  Certificate: /CN=app3.securepub.org

■ open https://app3.securepub.org
  - appears to work

■ test goatcounter
  ■ open https://app3.securepub.org?campaign=gitlab240111
  ■ open https://securepub-org.goatcounter.com
  - campaign is visible

Next Steps

• 2024-01-02 Deploy Status on GitLab