From 65bc1cb0b830eca866c7828d523987c2b0806f12 Mon Sep 17 00:00:00 2001
From: Sheogorath <sheogorath@shivering-isles.com>
Date: Fri, 24 Jun 2022 20:39:54 +0200
Subject: [PATCH] fix(gitlab): prevent users from changing usernames

This patch will help to prevent users from adjusting their usernames in
order to keep things aligned with SSO. This should help to keep things
organised.

References:
https://docs.gitlab.com/ee/administration/user_settings.html#prevent-users-from-changing-their-usernames
---
 roles/gitlab/templates/docker-compose.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/roles/gitlab/templates/docker-compose.yml b/roles/gitlab/templates/docker-compose.yml
index 1e7c711d..dde9af24 100644
--- a/roles/gitlab/templates/docker-compose.yml
+++ b/roles/gitlab/templates/docker-compose.yml
@@ -124,6 +124,7 @@ services:
         gitlab_rails['omniauth_sync_profile_attributes'] = ['name', 'email']
         gitlab_rails['omniauth_allow_bypass_two_factor'] = ['openid_connect']
         gitlab_rails['omniauth_auto_link_user'] = ["openid_connect"]
+        gitlab_rails['gitlab_username_changing_enabled'] = false
         gitlab_rails['omniauth_providers'] = [
           {
             name: 'openid_connect',
-- 
GitLab