This issue tracks requirements for what we need in order to feel confident to open Keycloak (and therefore GitLab up to the public). - [x] User registration security audit - [x] Sensible password restrictions - [x] Recaptcha for user registration (#35) - [x] Login flow audit - [x] GitLab security audit - [x] Keycloak monitoring (#23) - [ ] GitLab monitoring (#14) - [x] Review secure Gitlab runner (#74) - [x] GitLab secure runner for our own projects with proper restrictions (#32) - [x] Audit security of public runners (#8) - [x] Add github.com as identity provider (#2) - [ ] ~~Add gitlab.com as identity provider (#40)~~ - [x] Allow incoming mail on GitLab (#3) - [x] Enable Keycloak event logging (#68) - [x] Finish Arch theme of Keycloak (!28) - [x] Research fine grade permissions for externals (#9) - [x] Fix GitLab backups (#118) - [x] Validate GitLab backups - [x] Validate Keycloak backups