> [Introduced](https://gitlab.com/gitlab-org/gitlab-foss/-/merge_requests/30829) in GitLab 12.2.
> [Introduced](https://gitlab.com/gitlab-org/gitlab-foss/-/merge_requests/30829) in GitLab 12.2.
This setting allows you to rate limit the requests to raw endpoints, defaults to `300` requests per minute.
This setting defaults to `300` requests per minute, and allows you to rate limit the requests to raw endpoints:
It can be modified in **Admin Area > Settings > Network > Performance Optimization**.
1. On the top bar, select **Menu >****{admin}****Admin**.
1. In the left sidebar, select **Settings > Network**.
1. Expand **Performance optimization**.
For example, requests over `300` per minute to `https://gitlab.com/gitlab-org/gitlab-foss/raw/master/app/controllers/application_controller.rb` are blocked. Access to the raw file is released after 1 minute.
For example, requests over `300` per minute to `https://gitlab.com/gitlab-org/gitlab-foss/raw/master/app/controllers/application_controller.rb` are blocked. Access to the raw file is released after 1 minute.
@@ -22,7 +22,8 @@ you do not expect public users to sign up for an account.
...
@@ -22,7 +22,8 @@ you do not expect public users to sign up for an account.
To disable sign ups:
To disable sign ups:
1. Go to **Admin Area > Settings > General** and expand **Sign-up restrictions**.
1. On the top bar, select **Menu >****{admin}****Admin**.
1. In the left sidebar, select **Settings > General**, and expand **Sign-up restrictions**.
1. Clear the **Sign-up enabled** checkbox, then select **Save changes**.
1. Clear the **Sign-up enabled** checkbox, then select **Save changes**.
## Require administrator approval for new sign ups
## Require administrator approval for new sign ups
...
@@ -34,7 +35,8 @@ When this setting is enabled, any user visiting your GitLab domain and signing u
...
@@ -34,7 +35,8 @@ When this setting is enabled, any user visiting your GitLab domain and signing u
To require administrator approval for new sign ups:
To require administrator approval for new sign ups:
1. Go to **Admin Area > Settings > General** and expand **Sign-up restrictions**.
1. On the top bar, select **Menu >****{admin}****Admin**.
1. In the left sidebar, select **Settings > General**, and expand **Sign-up restrictions**.
1. Select the **Require admin approval for new sign-ups** checkbox, then select **Save changes**.
1. Select the **Require admin approval for new sign-ups** checkbox, then select **Save changes**.
In [GitLab 13.7 and later](https://gitlab.com/gitlab-org/gitlab/-/issues/273258), if an administrator disables this setting, the users in pending approval state are
In [GitLab 13.7 and later](https://gitlab.com/gitlab-org/gitlab/-/issues/273258), if an administrator disables this setting, the users in pending approval state are
...
@@ -47,7 +49,8 @@ their email address before they are allowed to sign in.
...
@@ -47,7 +49,8 @@ their email address before they are allowed to sign in.
To enforce confirmation of the email address used for new sign ups:
To enforce confirmation of the email address used for new sign ups:
1. Go to **Admin Area > Settings > General** and expand **Sign-up restrictions**.
1. On the top bar, select **Menu >****{admin}****Admin**.
1. In the left sidebar, select **Settings > General**, and expand **Sign-up restrictions**.
1. Select the **Enable email restrictions for sign ups** checkbox, then select **Save changes**.
1. Select the **Enable email restrictions for sign ups** checkbox, then select **Save changes**.
## User cap **(FREE SELF)**
## User cap **(FREE SELF)**
...
@@ -64,7 +67,8 @@ user cap, the users in pending approval state are automatically approved in a ba
...
@@ -64,7 +67,8 @@ user cap, the users in pending approval state are automatically approved in a ba
### Set the user cap number
### Set the user cap number
1. Go to **Admin Area > Settings > General**.
1. On the top bar, select **Menu >****{admin}****Admin**.
1. In the left sidebar, select **Settings > General**.
1. Expand **Sign-up restrictions**.
1. Expand **Sign-up restrictions**.
1. Enter a number in **User cap**.
1. Enter a number in **User cap**.
1. Select **Save changes**.
1. Select **Save changes**.
...
@@ -73,7 +77,8 @@ New user sign ups are subject to the user cap restriction.
...
@@ -73,7 +77,8 @@ New user sign ups are subject to the user cap restriction.
## Remove the user cap
## Remove the user cap
1. Go to **Admin Area > Settings > General**.
1. On the top bar, select **Menu >****{admin}****Admin**.
1. In the left sidebar, select **Settings > General**.
1. Expand **Sign-up restrictions**.
1. Expand **Sign-up restrictions**.
1. Remove the number from **User cap**.
1. Remove the number from **User cap**.
1. Select **Save changes**.
1. Select **Save changes**.
...
@@ -130,7 +135,8 @@ reduce the risk of malicious users creating spam accounts with disposable email
...
@@ -130,7 +135,8 @@ reduce the risk of malicious users creating spam accounts with disposable email
To create an email domain allowlist or denylist:
To create an email domain allowlist or denylist:
1. Go to **Admin Area > Settings > General** and expand **Sign-up restrictions**.
1. On the top bar, select **Menu >****{admin}****Admin**.
1. In the left sidebar, select **Settings > General**, and expand **Sign-up restrictions**.
1. For the allowlist, you must enter the list manually. For the denylist, you can enter the list
1. For the allowlist, you must enter the list manually. For the denylist, you can enter the list
manually or upload a `.txt` file that contains list entries.
manually or upload a `.txt` file that contains list entries.
# Enforce accepting Terms of Service **(FREE SELF)**
# Enforce accepting Terms of Service **(FREE SELF)**
An admin can enforce acceptance of a terms of service and privacy policy. When this option is enabled, new and existing users must accept the terms.
An administrator can enforce acceptance of a terms of service and privacy policy. When this option is enabled, new and existing users must accept the terms.
If configured, the Terms of Service page can be viewed via `https://your-instance.com/-/users/terms` at anytime.
If configured, the Terms of Service page can be viewed via `https://your-instance.com/-/users/terms` at anytime.
...
@@ -16,7 +16,8 @@ If configured, the Terms of Service page can be viewed via `https://your-instanc
...
@@ -16,7 +16,8 @@ If configured, the Terms of Service page can be viewed via `https://your-instanc
To enforce acceptance of a Terms of Service and Privacy Policy:
To enforce acceptance of a Terms of Service and Privacy Policy:
1. Log in to the GitLab instance as an admin user.
1. Log in to the GitLab instance as an admin user.
1. Go to **Admin Area > Settings > General**.
1. On the top bar, select **Menu >****{admin}****Admin**.
1. In the left sidebar, select **Settings > General**.
1. Expand the **Terms of Service and Privacy Policy** section.
1. Expand the **Terms of Service and Privacy Policy** section.
1. Check the **Require all users to accept Terms of Service and Privacy Policy when they access
1. Check the **Require all users to accept Terms of Service and Privacy Policy when they access