gitlab-ce_letsencrypt

# gitlab.rb , 8230 port in host is mapped to 443 in gitlab-ce

external_url "http://gitlab.mydomain.tld:8230"
registry_external_url "http://registry.mydomain.tld:8230"
mattermost_external_url "http://mattermost.mydomain.tld:8230"

# gitlab.subdomain.conf
server {
    listen 443 ssl;

    server_name gitlab.*;

    include /config/nginx/ssl.conf;

    client_max_body_size 0;

    location / {
        include /config/nginx/proxy.conf;

        proxy_max_temp_file_size 2048m;
        set $upstream_gitlab gitlab;
        proxy_pass http://$upstream_gitlab:8230;
        proxy_redirect off;
                proxy_set_header Host $http_host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Proto $scheme;
                proxy_set_header X-Forwarded-Protocol $scheme;
                   proxy_set_header X-Url-Scheme $scheme;
    }
}

# registry.subdomain.conf

server {
    listen 443 ssl;

    server_name registry.*;

    include /config/nginx/ssl.conf;

    client_max_body_size 0;

    location / {
        include /config/nginx/proxy.conf;

        proxy_max_temp_file_size 2048m;
        set $upstream_registry registry;
        proxy_pass http://$upstream_registry:8230;
        proxy_redirect off;
                proxy_set_header Host $http_host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Proto $scheme;
                proxy_set_header X-Forwarded-Protocol $scheme;
                   proxy_set_header X-Url-Scheme $scheme;
    }
}