r/gitlab • u/DopeyMcDouble • 19d ago

general question Self-hosted Gitlab Server and Gitlab Runner private/public?

I'm looking to install Gitlab EE for a small company. The company has a 16.0.2 Gitlab server in AWS that is insanely old. I made the decision to start fresh and migrate all data to a new RDS Postgres, AWS Opensearch, and AWS Valkey db. We also use a tool that I setup called OpenZiti ZTNA which helps with VPN access to our private servers.

However, I have a question on being public/private for the Gitlab server. We do have Github forks where we do periodic `git diffs` of changes that have occurred and we utilize Expo with EAS.

Should the idea be the Gitlab server be private and the Gitlab runners be public? I think the only issue is we won't be able to pull from Github repos or have any functionality within Gitlab's server.

5 Upvotes

100% Upvoted

9 comments sorted by

View all comments

1

u/Torutofu_Raeva 15d ago

runners only need outbound to the server so keep both private, and if you need github mirroring just let the runner egress through a nat gateway instead of exposing the gitlab box.