GitLab · Schema

putApiV4ApplicationSettingsRequest

CodeDeveloper ToolsPlatformSoftware DevelopmentVersion ControlGitLab

Properties

Name Type Description
admin_mode booleannull If `true`, requires administrators to re-authenticate before performing potentially dangerous administrative operations.
admin_notification_email stringnull If set, [abuse reports](https://docs.gitlab.com/administration/review_abuse_reports/) are sent to this address. Abuse reports are always available in the **Admin** area. Deprecated. Use `abuse_notific
abuse_notification_email stringnull If set, [abuse reports](https://docs.gitlab.com/administration/review_abuse_reports/) are sent to this address. Abuse reports are always available in the **Admin** area.
after_sign_up_text stringnull Text shown after sign up.
after_sign_out_path stringnull Users are redirected to this page after they sign out.
akismet_enabled booleannull If `true`, helps prevent bots from creating issues. Requires `akismet_api_key`.
akismet_api_key stringnull Generate API key at http://www.akismet.com
asset_proxy_enabled booleannull Enable proxying of assets
asset_proxy_url stringnull URL of the asset proxy server
asset_proxy_secret_key stringnull Shared secret with the asset proxy server
asset_proxy_whitelist arraynull Assets that match these domains are not proxied. Wildcards allowed. Your GitLab installation URL is automatically allowlisted. GitLab restart is required to apply changes. Deprecated. Use `asset_proxy
asset_proxy_allowlist arraynull Assets that match these domains are not proxied. Wildcards allowed. Your GitLab installation URL is automatically allowlisted. GitLab restart is required to apply changes.
authn_data_retention_cleanup_enabled booleannull If `true`, runs cleanup workers that permanently delete authentication login history older than one year, and previously revoked OAuth access tokens and grants older than one month. [Introduced](https
container_registry_token_expire_delay integernull Duration, in minutes, that container registry authorization tokens remain valid.
oauth_access_token_expires_in integernull Maximum lifetime in seconds of all new OAuth access tokens issued by the instance. Minimum value: `300` (5 minutes). Default value: `7200` (2 hours). If blank or `null`, uses default value. Does not a
decompress_archive_file_timeout integernull Timeout for decompressing archived files, in seconds. Set to `0` to disable the timeout.
default_artifacts_expire_in stringnull Set the default expiration time for each job's artifacts.
default_ci_config_path stringnull Default CI/CD configuration file and path for new projects. If empty, new projects use `.gitlab-ci.yml`.
default_project_creation integernull Default minimum role required to create projects. Can take: `0` _(No one)_, `1` _(Maintainers)_, `2` _(Developers)_, `3` _(Administrators)_, or `4` _(Owners)_.
default_remove_source_branch_after_merge booleannull Enable the delete source branch option by default for new projects
default_branch_protection integernull Level of protection for the default branch. [Deprecated](https://gitlab.com/gitlab-org/gitlab/-/issues/408314) in GitLab 17.0. Use `default_branch_protection_defaults` instead.
default_branch_protection_defaults objectnull Default branch protection settings. For available options, see [Options for `default_branch_protection_defaults`](https://docs.gitlab.com/api/groups/#options-for-default_branch_protection_defaults). [
default_group_visibility stringnull What visibility level new groups receive. Default is `private`. Cannot be set to any levels in `restricted_visibility_levels`.
default_project_visibility stringnull What visibility level new projects receive. Default is `private`. Cannot be set to any levels in `restricted_visibility_levels`.
default_projects_limit integernull Maximum number of personal projects per user. Default is `100000`.
default_snippet_visibility stringnull What visibility level new snippets receive. Default is `private`.
dependency_management_settings objectnull Dependency management settings. Set `security_update_scheduler_max_concurrency` (integer) to cap the number of security update scheduler jobs that run concurrently across the Sidekiq fleet. Default: `
disable_admin_oauth_scopes booleannull Stop administrators from connecting to non-trusted OAuth applications.
disable_feed_token booleannull Disable display of RSS/Atom and Calendar `feed_tokens`
disabled_oauth_sign_in_sources arraynull OAuth sign-in sources to disable.
domain_denylist_enabled booleannull If `true`, enables the domain denylist for sign-ups. Requires `domain_denylist`.
domain_denylist arraynull Users with e-mail addresses that match these domain(s) will NOT be able to sign-up. Wildcards allowed. Enter multiple entries on separate lines. Ex: domain.com, *.domain.com
domain_allowlist arraynull Only users with email addresses that match these domains can sign up. Wildcards allowed. For example, `domain.com` or `*.domain.com`. If empty, all domains are allowed.
outbound_local_requests_whitelist arraynull List of trusted domains or IP addresses to which local requests are allowed when local requests for webhooks and integrations are disabled.
email_otp_enabled booleannull If `true`, enables email-based one-time passwords (OTP) as a multi-factor authentication method. Requires `require_email_verification_on_account_locked` to be `true`.
iframe_rendering_enabled booleannull If `true`, allows rendering of iframes in Markdown.
iframe_rendering_allowlist arraynull IDs of embed providers users can embed content from. Enter multiple entries separated by commas or on separate lines.
iframe_rendering_allowlist_raw stringnull Raw newline- or comma-separated list of IDs of embed providers users can embed content from.
eks_integration_enabled booleannull Enable integration with Amazon EKS
eks_account_id stringnull Amazon account ID for EKS integration.
eks_access_key_id stringnull Access key ID for the EKS integration IAM user.
eks_secret_access_key stringnull Secret access key for the EKS integration IAM user.
email_author_in_body booleannull If `true`, includes the name of the issue, merge request, or comment author in the email body. Useful when email servers do not support overriding the sender name.
email_confirmation_setting stringnull Specifies whether users must confirm their email address before signing in. `off` does not require confirmation, `soft` allows sign-in during a confirmation period, and `hard` requires confirmation be
enabled_git_access_protocol stringnull Protocol allowed for Git access. Set to `all` to allow both SSH and HTTP(S).
gitpod_enabled booleannull If `true`, enables [Ona integration](https://docs.gitlab.com/integration/gitpod/). Requires `gitpod_url`.
gitpod_url stringnull Ona instance URL for the integration.
gitaly_timeout_default integernull Default Gitaly timeout, in seconds. Set to `0` to disable timeouts.
gitaly_timeout_fast integernull Gitaly fast operation timeout, in seconds. Set to 0 to disable timeouts.
gitaly_timeout_medium integernull Medium Gitaly timeout, in seconds. Set to 0 to disable timeouts.
grafana_enabled booleannull If `true`, enables Grafana.
grafana_url stringnull Grafana URL.
gravatar_enabled booleannull If `true`, enables the Gravatar service.
help_page_hide_commercial_content booleannull If `true`, hides marketing-related entries from help.
help_page_support_url stringnull Alternate support URL for help page and help dropdown.
help_page_documentation_base_url stringnull Alternate documentation pages URL.
help_page_text stringnull Custom text displayed on the help page.
home_page_url stringnull Users who are not signed in are redirected to this page.
housekeeping_enabled booleannull Enable automatic repository housekeeping (git repack, git gc)
housekeeping_full_repack_period integernull Number of Git pushes after which a full `git repack` is run. Deprecated. Use `housekeeping_optimize_repository_period` instead. All or none of `housekeeping_full_repack_period`, `housekeeping_gc_perio
housekeeping_gc_period integernull Number of Git pushes after which `git gc` is run. Deprecated. Use `housekeeping_optimize_repository_period` instead. All or none of `housekeeping_full_repack_period`, `housekeeping_gc_period`, `housek
housekeeping_incremental_repack_period integernull Number of Git pushes after which an incremental `git repack` is run. Deprecated. Use `housekeeping_optimize_repository_period` instead. Exactly one of `housekeeping_incremental_repack_period`, `housek
housekeeping_optimize_repository_period integernull Number of Git pushes after which Gitaly is asked to optimize a repository. Exactly one of `housekeeping_incremental_repack_period`, `housekeeping_optimize_repository_period` must be provided.
html_emails_enabled booleannull If `true`, sends emails in both HTML and plain text formats. If `false`, sends emails in plain text only. Defaults to `true`.
import_sources arraynull Sources to allow project import from. OmniAuth must be configured for GitHub, Bitbucket, and GitLab.com.
invisible_captcha_enabled booleannull If `true`, enables Invisible CAPTCHA spam detection during account creation.
max_artifacts_size integernull Maximum file size, in MB, for each job's artifacts.
max_attachment_size integernull Maximum attachment size in MB.
max_export_size integernull Maximum export size in MB
max_github_response_size_limit integernull Maximum size in MB for GitHub API responses. Set to `0` for unlimited size.
max_github_response_json_value_count integernull Maximum object count for GitHub API responses. Set to `0` for unlimited. The count is an estimate based on the number of `:`, `,`, `{`, and `[` characters in the response.
max_import_size integernull Maximum import size in MB
max_import_remote_file_size integernull Maximum remote file size in MB for imports from external object storages
max_decompressed_archive_size integernull Maximum decompressed file size for imported archives in MB. Set to `0` for unlimited. Default is `25600`.
max_pages_size integernull Maximum size of each GitLab Pages site in MB. Set to `0` to allow up to 1 TB.
max_pages_custom_domains_per_project integernull Maximum number of GitLab Pages custom domains per project
max_terraform_state_size_bytes integernull Maximum size of the Terraform state file in bytes. Set to `0` for unlimited size.
metrics_method_call_threshold integernull Method call is only tracked if it takes longer than this threshold, in milliseconds.
password_authentication_enabled booleannull Flag indicating if password authentication is enabled for the web interface. Mutually exclusive with `password_authentication_enabled_for_web`, `signin_enabled`.
password_authentication_enabled_for_web booleannull If `true`, enables authentication for the web interface via a GitLab account password. Defaults to `true`. Mutually exclusive with `password_authentication_enabled`, `signin_enabled`.
signin_enabled booleannull If `true`, enables password authentication for the web interface. Deprecated. Use `password_authentication_enabled_for_web` instead. Mutually exclusive with `password_authentication_enabled_for_web`,
password_authentication_enabled_for_git booleannull If `true`, enables authentication for Git over HTTP(S) via a GitLab account password. Defaults to `true`.
performance_bar_allowed_group_id stringnull Path of the group that is allowed to toggle the performance bar. Deprecated. Use `performance_bar_allowed_group_path` instead.
performance_bar_allowed_group_path stringnull Path of the group that is allowed to toggle the performance bar.
performance_bar_enabled stringnull Deprecated: Pass `performance_bar_allowed_group_path: nil` instead. Allow enabling the performance.
personal_access_token_prefix stringnull Prefix to prepend to all personal access tokens.
require_personal_access_token_expiry booleannull If `true`, requires an expiration date on group and project access tokens, and on personal access tokens not owned by service accounts.
kroki_enabled booleannull If `true`, enables [Kroki integration](https://docs.gitlab.com/administration/integration/kroki/). Requires `kroki_url`.
kroki_url stringnull Kroki server URL.
plantuml_enabled booleannull If `true`, enables [PlantUML integration](https://docs.gitlab.com/administration/integration/plantuml/). Requires `plantuml_url`.
plantuml_url stringnull The PlantUML server URL
diagramsnet_enabled booleannull If `true`, enables [Diagrams.net integration](https://docs.gitlab.com/administration/integration/diagrams_net/). Requires `diagramsnet_url`. Defaults to `true`.
diagramsnet_url stringnull The Diagrams.net server URL
polling_interval_multiplier numbernull Interval multiplier used by endpoints that perform polling. Set to `0` to disable polling.
project_export_enabled booleannull If `true`, enables project export.
prometheus_metrics_enabled booleannull If `true`, enables Prometheus metrics.
push_event_hooks_limit integernull Maximum number of changes (branches or tags) in a single push above which webhooks and integrations are not triggered. Setting to `0` does not disable throttling. Default: `3`.
push_event_activities_limit integernull Maximum number of changes (branches or tags) in a single push above which a bulk push event is created. Setting to `0` does not disable throttling.
recaptcha_enabled booleannull If `true`, enables reCAPTCHA. Requires `recaptcha_private_key` and `recaptcha_site_key`.
recaptcha_site_key stringnull Generate site key at http://www.google.com/recaptcha
recaptcha_private_key stringnull Generate private key at http://www.google.com/recaptcha
login_recaptcha_protection_enabled booleannull Helps prevent brute-force attacks
repository_checks_enabled booleannull If `true`, GitLab periodically runs `git fsck` in all project and wiki repositories to look for silent disk corruption issues.
repository_storages_weighted objectnull Hash of names of storages taken from `gitlab.yml` to [weights](https://docs.gitlab.com/administration/repository_storage_paths/#configure-where-new-repositories-are-stored) ranging from 0 to 100. New
require_two_factor_authentication booleannull If `true`, requires all users to set up two-factor authentication. Requires `two_factor_grace_period`.
two_factor_grace_period integernull Amount of time, in hours, that users can skip enforced two-factor authentication setup.
restricted_visibility_levels arraynull Selected levels cannot be used by non-administrator users for groups, projects, or snippets. Can take `private`, `internal`, and `public` as a parameter. If the `public` level is restricted, user prof
session_expire_delay integernull Session duration in minutes. Requires a GitLab restart to apply changes.
session_expire_from_init booleannull If `true`, sessions expire a number of minutes after the session was created rather than after the last activity. The session lifetime is defined by `session_expire_delay`.
shared_runners_enabled booleannull Enable shared runners for new projects
shared_runners_text stringnull Shared runners text
valid_runner_registrars arraynull List of types which are allowed to register a GitLab Runner. Can be `[]`, `['group']`, `['project']`, or `['group', 'project']`.
signup_enabled booleannull If `true`, enables registration. Defaults to `true`.
sourcegraph_enabled booleannull If `true`, enables Sourcegraph integration. Requires `sourcegraph_url`.
sourcegraph_public_only booleannull If `true`, blocks Sourcegraph from being loaded on private and internal projects. Defaults to `true`.
sourcegraph_url stringnull Configured Sourcegraph instance URL.
spam_check_endpoint_enabled booleannull Enable Spam Check via external API endpoint
spam_check_endpoint_url stringnull URL of the external Spamcheck service endpoint. Valid URI schemes are `grpc` or `tls`. Specifying `tls` forces communication to be encrypted.
terminal_max_session_time integernull Maximum time for a web terminal WebSocket connection, in seconds. Set to `0` for unlimited time.
usage_ping_enabled booleannull Every week GitLab will report license usage back to GitLab, Inc.
local_markdown_version integernull Local Markdown version. Increase this value to invalidate all cached Markdown.
allow_local_requests_from_hooks_and_services booleannull If `true`, allows requests to the local network from webhooks and integrations. Deprecated. Use `allow_local_requests_from_web_hooks_and_services` instead.
mailgun_events_enabled booleannull Enable Mailgun event receiver
mailgun_signing_key stringnull Mailgun HTTP webhook signing key for receiving events from webhook.
snowplow_enabled booleannull Enable Snowplow tracking
snowplow_collector_hostname stringnull The Snowplow collector hostname
snowplow_cookie_domain stringnull Snowplow cookie domain, for example `.gitlab.com`.
snowplow_app_id stringnull Snowplow site name or application ID, for example `gitlab`.
issues_create_limit integernull Maximum number of issue creation requests allowed per minute per user. Set to 0 for unlimited requests per minute.
raw_blob_request_limit integernull Maximum number of requests per minute for each raw path (default is `300`). Set to `0` to disable throttling.
raw_blob_request_limit_unauthenticated integernull Maximum number of unauthenticated requests per minute across all raw paths in a project (default is `800`). Set to `0` to disable throttling.
wiki_page_max_content_bytes integernull Maximum wiki page content size in bytes. Default: 5242880 bytes (5 MB). The minimum value is 1024 bytes.
description_and_note_max_size integernull Maximum work item, merge request, and vulnerability description and comment content size in bytes.
wiki_asciidoc_allow_uri_includes booleannull If `true`, allows URI includes for AsciiDoc wiki pages.
require_admin_approval_after_user_signup booleannull If `true`, requires explicit administrator approval for new signups.
whats_new_variant stringnull Which features [What's new](https://docs.gitlab.com/administration/whats-new/) shows. `all_tiers` shows features for all tiers, `current_tier` shows only features for the instance's tier, and `disable
floc_enabled booleannull If `true`, enables FloC (Federated Learning of Cohorts).
user_deactivation_emails_enabled booleannull If `true`, sends emails to users when their account is deactivated.
show_migrate_from_jenkins_banner booleannull If `true`, shows the Jenkins migration banner.
enable_artifact_external_redirect_warning_page booleannull If `true`, shows the external redirect page that warns about user-generated content in GitLab Pages.
users_get_by_id_limit integernull Maximum number of calls to the `/users/:id` API per 10 minutes per user. Set to `0` for unlimited requests.
runner_token_expiration_interval integernull Set the expiration time (in seconds) of authentication tokens of newly registered instance runners. Minimum value is 7200 seconds. For more information, see [Automatically rotate authentication tokens
group_runner_token_expiration_interval integernull Set the expiration time (in seconds) of authentication tokens of newly registered group runners. Minimum value is 7200 seconds. For more information, see [Automatically rotate authentication tokens](h
project_runner_token_expiration_interval integernull Set the expiration time (in seconds) of authentication tokens of newly registered project runners. Minimum value is 7200 seconds. For more information, see [Automatically rotate authentication tokens]
pipeline_limit_per_project_user_sha integernull Maximum number of pipeline creation requests per minute per user and commit. Set to `0` for unlimited requests. Disabled by default.
pipeline_limit_per_user integernull Maximum number of pipeline creation requests allowed per minute per user. Set to `0` for unlimited requests.
ci_lint_limit_per_user integernull Maximum number of CI Lint requests per minute per user. Set to `0` for unlimited requests. Disabled by default.
jira_connect_application_key stringnull ID of the OAuth application used to authenticate with the GitLab for Jira Cloud app.
jira_connect_public_key_storage_enabled booleannull If `true`, enables public key storage for the GitLab for Jira Cloud app.
jira_connect_proxy_url stringnull URL of the GitLab instance used as a proxy for the GitLab for Jira Cloud app.
jira_forge_app_id stringnull Atlassian Forge app ID (ARI) of the GitLab for Jira Cloud app, used to verify inbound Forge Invocation Tokens.
bulk_import_concurrent_pipeline_batch_limit integernull Maximum number of simultaneous direct transfer batch exports to process.
concurrent_relation_batch_export_limit integernull Maximum number of simultaneous batch export jobs to process.
project_relations_export_limit integernull Maximum number of project relations export requests per minute per user for each project during direct transfer migrations. Set to `0` to disable the rate limit.
project_relations_export_download_limit integernull Maximum number of project relations export downloads per minute per user for each project during direct transfer migrations. Set to `0` to disable the rate limit.
group_relations_export_limit integernull Maximum number of group relations export requests per minute per user for each group during direct transfer migrations. Set to `0` to disable the rate limit.
group_relations_export_download_limit integernull Maximum number of group relations export downloads per minute per user for each group during direct transfer migrations. Set to `0` to disable the rate limit.
bulk_import_enabled booleannull If `true`, enables migrating GitLab groups and projects by direct transfer.
bulk_import_max_download_file integernull Maximum download file size, in MB, when importing from source GitLab instances by direct transfer.
autocomplete_users_limit integernull Maximum number of authenticated requests per minute per user to the users autocomplete endpoint.
autocomplete_users_unauthenticated_limit integernull Maximum number of unauthenticated requests per minute per IP address to the users autocomplete endpoint.
concurrent_github_import_jobs_limit integernull Maximum number of simultaneous import jobs for the GitHub importer. Default is `1000`.
concurrent_bitbucket_import_jobs_limit integernull Maximum number of simultaneous import jobs for the Bitbucket Cloud importer. Default is `100`.
concurrent_bitbucket_server_import_jobs_limit integernull Maximum number of simultaneous import jobs for the Bitbucket Server importer. Default is `100`.
concurrent_pull_request_import_jobs_limit integernull Maximum number of simultaneous pull request import jobs for the GitHub, Bitbucket Cloud, and Bitbucket Server importers. Default is `200`.
allow_runner_registration_token booleannull If `true`, allows using a registration token to create a runner. Defaults to `true`.
ci_max_includes integernull [Maximum number of includes](https://docs.gitlab.com/administration/cicd/limits/#maximum-number-of-includes) per pipeline. Default is `150`.
ci_max_caches_per_job integernull Maximum number of caches that can be defined in a single CI/CD job.
ci_job_live_trace_enabled booleannull If `true`, turns on incremental logging for job logs. Archived job logs are incrementally uploaded to object storage, which must be configured.
ci_job_trace_update_interval integernull Job log update interval when the job log is not open, in seconds.
ci_job_trace_update_interval_when_being_watched integernull Job log update interval when the job log is open, in seconds.
git_push_pipeline_limit integernull Maximum number of branch or tag pipelines that can be triggered by a single Git push. Set to `0` to disable the limit.
security_policy_global_group_approvers_enabled booleannull If `true`, looks up merge request approval policy approval groups globally. If `false`, looks them up within project hierarchies.
slack_app_enabled booleannull If `true`, enables the GitLab for Slack app. Requires `slack_app_id`, `slack_app_secret`, `slack_app_signing_secret`, and `slack_app_verification_token`.
slack_app_id stringnull Client ID of the GitLab for Slack app.
slack_app_secret stringnull Client secret of the GitLab for Slack app. Used for authenticating OAuth requests from the app.
slack_app_signing_secret stringnull Signing secret of the GitLab for Slack app. Used for authenticating API requests from the app.
slack_app_verification_token stringnull Verification token of the GitLab for Slack app. This method of authentication is deprecated by Slack and used only for authenticating slash commands from the app.
namespace_aggregation_schedule_lease_duration_in_seconds integernull Maximum duration, in seconds, between refreshes of namespace statistics. Defaults to `300`.
project_jobs_api_rate_limit integernull Maximum authenticated requests to /project/:id/jobs per minute
security_txt_content stringnull Public security contact information made available at https://gitlab.example.com/.well-known/security.txt.
downstream_pipeline_trigger_limit_per_project_user_sha integernull [Maximum number of downstream pipelines](https://docs.gitlab.com/administration/cicd/limits/#limit-downstream-pipeline-trigger-rate) that can be triggered per minute for a given project, user, and com
pipeline_cancel_limit_per_user_project integernull Maximum number of pipeline cancellations allowed per minute for a given project.
pipeline_retry_limit_per_user_project integernull Maximum number of pipeline retries allowed per minute for a given project.
job_retry_limit_per_user_project integernull Maximum number of job retries allowed per minute for a given project.
job_play_limit_per_user_project integernull Maximum number of manual job runs allowed per minute for a given project.
pipeline_delete_limit_per_user_project integernull Maximum number of pipeline deletions allowed per minute for a given project.
job_erase_limit_per_user_project integernull Maximum number of job erasures allowed per minute for a given project.
job_cancel_limit_per_user_project integernull Maximum number of job cancellations allowed per minute for a given project.
ai_action_api_rate_limit integernull Maximum requests a user can make per 8 hours to aiAction endpoint
code_suggestions_api_rate_limit integernull Maximum number of requests a user can make to the code suggestions endpoint per minute.
resource_usage_limits objectnull Definition for resource usage limits enforced in Sidekiq workers.
code_dropdown_custom_clients arraynull Custom "Open with" clients shown in the project Code dropdown list
vscode_extension_marketplace objectnull Settings for VS Code Extension Marketplace.
enable_language_server_restrictions booleannull Enables enforcing language server restrictions
minimum_language_server_version stringnull Minimum language server version to accept requests from.
terraform_state_encryption_enabled booleannull Enable encryption for Terraform state files
logging_field_schema_version integernull Logging field schema version (v0, v1, …). Cannot be downgraded.
logging_field_dual_emit_target integernull Version to dual-emit alongside schema_version. Must be strictly greater than schema_version, or omit/null to disable.
rsa_key_restriction integernull Restrictions on the complexity of uploaded RSA keys. A value of -1 disables all RSA keys.
dsa_key_restriction integernull Restrictions on the complexity of uploaded DSA keys. A value of -1 disables all DSA keys.
ecdsa_key_restriction integernull Restrictions on the complexity of uploaded ECDSA keys. A value of -1 disables all ECDSA keys.
ed25519_key_restriction integernull Restrictions on the complexity of uploaded ED25519 keys. A value of -1 disables all ED25519 keys.
ecdsa_sk_key_restriction integernull Restrictions on the complexity of uploaded ECDSA_SK keys. A value of -1 disables all ECDSA_SK keys.
ed25519_sk_key_restriction integernull Restrictions on the complexity of uploaded ED25519_SK keys. A value of -1 disables all ED25519_SK keys.
allow_account_deletion stringnull If `true`, allows users to delete their accounts. Premium and Ultimate only.
allow_application_default_credentials_for_offline_transfer stringnull If `true`, allows Google Cloud Application Default Credentials for offline transfer. Even when enabled, only administrators can use these credentials, and the bucket name must start with `gitlab-offli
allow_bypass_placeholder_confirmation stringnull If `true`, skips confirmation when administrators reassign placeholder users. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/534330) in GitLab 18.0.
allow_local_requests_from_system_hooks stringnull If `true`, allows requests to the local network from system hooks.
allow_local_requests_from_web_hooks_and_services stringnull If `true`, allows requests to the local network from webhooks and integrations.
allow_project_creation_for_guest_and_below stringnull If `true`, users assigned up to the Guest role can create groups and personal projects. Defaults to `true`.
allow_s3_compatible_storage_for_offline_transfer stringnull If `true`, allows S3-compatible object storage for offline transfer. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/work_items/579705) in GitLab 18.9.
archive_builds_in_human_readable stringnull Set the duration for which the jobs are considered as old and expired. After that time passes, the jobs are archived and no longer able to be retried. Make it empty to never expire jobs. It has to be
asciidoc_max_includes stringnull Maximum number of AsciiDoc include directives processed in any one document. Default: `32`. Maximum: `64`.
authorized_keys_enabled stringnull If `true`, GitLab uses the `authorized_keys` file to authenticate SSH keys, which supports Git over SSH without additional configuration. Disable only if you have configured your OpenSSH server to use
auto_accept_awarded_achievements stringnull If `true`, newly awarded achievements are accepted automatically and appear on user profiles immediately. Does not affect achievements awarded before this setting is enabled. Recipients can still hide
auto_devops_domain stringnull Specify a domain to use by default for every project's Auto Review Apps and Auto Deploy stages.
auto_devops_enabled stringnull If `true`, enables Auto DevOps for projects by default. Auto DevOps automatically builds, tests, and deploys applications based on a predefined CI/CD configuration.
bulk_import_max_download_file_size stringnull Maximum download file size when importing from source GitLab instances by direct transfer.
can_create_group stringnull If `true`, users can create top-level groups. Defaults to `true`.
ci_delete_pipelines_in_seconds_limit_human_readable stringnull Maximum value that is allowed for configuring pipeline retention. Defaults to `1 year`.
ci_max_total_yaml_size_bytes stringnull Maximum amount of memory, in bytes, that can be allocated for the pipeline configuration, with all included YAML configuration files.
ci_partitions_in_seconds_limit stringnull Time window, in seconds, before new CI partitions are created and the system switches to the next set of partitions. Must be between 1 month and 6 months. Default is 1 month (`2592000`). Write-only. N
ci_partitions_in_seconds_limit_human_readable stringnull Time window before new CI partitions are created and the system switches to the next set of partitions. Must be between `1 month` and `6 months`. Defaults to `1 month`.
commit_email_hostname stringnull Custom hostname (for private commit emails).
container_expiration_policies_enable_historic_entries stringnull If `true`, enables [cleanup policies](https://docs.gitlab.com/user/packages/container_registry/reduce_container_registry_storage/#enable-the-cleanup-policy) for all projects.
container_registry_cleanup_tags_service_max_list_size stringnull Maximum number of tags that can be deleted in a single execution of [cleanup policies](https://docs.gitlab.com/user/packages/container_registry/reduce_container_registry_storage/#set-cleanup-limits-to
container_registry_delete_tags_service_timeout stringnull Maximum time, in seconds, that the cleanup process can take to delete a batch of tags for [cleanup policies](https://docs.gitlab.com/user/packages/container_registry/reduce_container_registry_storage/
container_registry_expiration_policies_caching stringnull If `true`, enables caching during the execution of [cleanup policies](https://docs.gitlab.com/user/packages/container_registry/reduce_container_registry_storage/#set-cleanup-limits-to-conserve-resourc
container_registry_expiration_policies_worker_capacity stringnull Number of workers for [cleanup policies](https://docs.gitlab.com/user/packages/container_registry/reduce_container_registry_storage/#set-cleanup-limits-to-conserve-resources).
custom_http_clone_url_root stringnull Set a custom Git clone URL for HTTP(S).
default_branch_name stringnull [Set the initial branch name](https://docs.gitlab.com/user/project/repository/branches/default/#change-the-default-branch-name-for-new-projects-in-an-instance) for all projects in an instance.
default_dark_syntax_highlighting_theme stringnull Default dark mode syntax highlighting theme for users who are new or not signed in. See [IDs of available themes](https://gitlab.com/gitlab-org/gitlab/blob/master/lib/gitlab/themes.rb#L16).
default_preferred_language stringnull Default preferred language for users who are not logged in.
default_syntax_highlighting_theme stringnull Default syntax highlighting theme for users who are new or not signed in. See [IDs of available themes](https://gitlab.com/gitlab-org/gitlab/blob/master/lib/gitlab/themes.rb#L16).
delete_inactive_projects stringnull Enable dormant project deletion. Default is `false`.
deletion_adjourned_period stringnull Number of days to wait before deleting a project or group that is marked for deletion. Value must be between `1` and `90`. Defaults to `30`.
diff_max_commits stringnull Maximum number of [diff commits](https://docs.gitlab.com/administration/diff_limits/) per merge request.
diff_max_files stringnull Maximum number of [files in a diff](https://docs.gitlab.com/administration/diff_limits/).
diff_max_lines stringnull Maximum number of [lines in a diff](https://docs.gitlab.com/administration/diff_limits/).
diff_max_patch_bytes stringnull Maximum [diff patch size](https://docs.gitlab.com/administration/diff_limits/), in bytes.
diff_max_versions stringnull Maximum number of [diff versions](https://docs.gitlab.com/administration/diff_limits/) per merge request.
disable_password_authentication_for_users_with_sso_identities stringnull Disable password authentication in the web interface for users with an SSO identity. This does not affect Git operations over HTTP(S). Default is `false`.
dns_rebinding_protection_enabled stringnull If `true`, enforces DNS-rebinding attack protection.
email_restrictions stringnull Regular expression that is checked against the email used during registration.
email_restrictions_enabled stringnull If `true`, prevents new users from signing up with an email address that matches the `email_restrictions` regular expression.
enforce_terms stringnull If `true`, enforces the application terms of service for all users. Requires `terms`.
external_auth_client_cert stringnull Certificate to use to authenticate with the external authorization service. Requires `external_auth_client_key`.
external_auth_client_key stringnull Private key for the certificate when authentication is required for the external authorization service. Encrypted when stored.
external_auth_client_key_pass stringnull Passphrase to use for the private key when authenticating with the external authorization service. Encrypted when stored.
external_authorization_service_default_label stringnull Default classification label to use when requesting authorization and no classification label has been specified on the project.
external_authorization_service_enabled stringnull If `true`, uses an external authorization service for accessing projects. Requires `external_authorization_service_default_label`, `external_authorization_service_timeout`, and `external_authorization
external_authorization_service_timeout stringnull The timeout after which an authorization request is aborted, in seconds. When a request times out, access is denied to the user. (min: 0.001, max: 10, step: 0.001).
external_authorization_service_url stringnull URL to which authorization requests are directed.
external_pipeline_validation_service_timeout stringnull Time to wait for a response from the pipeline validation service, in seconds. Assumes `OK` if it times out.
external_pipeline_validation_service_token stringnull Token to include as the `X-Gitlab-Token` header in requests to the URL in `external_pipeline_validation_service_url`.
external_pipeline_validation_service_url stringnull URL to use for pipeline validation requests.
failed_login_attempts_unlock_period_in_minutes stringnull Time period in minutes after which the user is unlocked when maximum number of failed sign-in attempts reached.
first_day_of_week stringnull Start day of the week for calendar views and date pickers. Valid values are `0` (default) for Sunday, `1` for Monday, and `6` for Saturday.
gitlab_dedicated_instance stringnull If `true`, the instance was provisioned for GitLab Dedicated.
gitlab_environment_toolkit_instance stringnull If `true`, the instance was provisioned with the GitLab Environment Toolkit for Service Ping reporting.
gitlab_product_usage_data_enabled stringnull If `true`, product usage data collection is enabled. When the `GITLAB_PRODUCT_USAGE_DATA_ENABLED` environment variable is set, the API returns the effective value from the environment variable.
gitlab_shell_operation_limit stringnull Maximum number of Git operations per minute a user can perform. Default: `600`.
hashed_storage_enabled stringnull Create new projects using hashed storage paths: Enable immutable, hash-based paths and repository names to store repositories on disk. This prevents repositories from having to be moved or renamed whe
hide_third_party_offers stringnull If `true`, hides offers from third parties in GitLab.
inactive_projects_delete_after_months stringnull If `delete_inactive_projects` is `true`, the time (in months) to wait before deleting dormant projects. Default is `2`.
inactive_projects_min_size_mb stringnull If `delete_inactive_projects` is `true`, the minimum repository size, in MB, for projects to be checked for inactivity. Default is `0`.
inactive_projects_send_warning_email_after_months stringnull If `delete_inactive_projects` is `true`, sets the time (in months) to wait before emailing Maintainers that the project is scheduled to be deleted because it is dormant. Default is `1`.
inactive_resource_access_tokens_delete_after_days stringnull Specifies retention period for inactive project and group access tokens. Default is `30`.
include_optional_metrics_in_service_ping stringnull If `true`, enables optional metrics in Service Ping.
keep_latest_artifact stringnull If `true`, prevents the deletion of the artifacts from the most recent successful jobs, regardless of the expiry time. Defaults to `true`.
kroki_diagram_proxy_enabled stringnull Enable Kroki diagram proxy. Default is `false`.
kroki_formats stringnull Additional formats supported by the Kroki instance. Possible values are `true` or `false` for formats `bpmn`, `blockdiag`, `excalidraw`, and `mermaid` in the format `: true` or `: fals
lock_require_sha_for_merge stringnull If `true`, enforces the `require_sha_for_merge` setting for all groups on the instance. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/236732) in GitLab 19.2.
max_http_decompressed_size stringnull Maximum allowed size in MiB for Gzip-compressed HTTP responses from outbound requests after decompression. Set to `0` for unlimited.
max_http_response_csv_structural_chars stringnull Maximum allowed object count in CSV HTTP responses from outbound requests. Count is an estimate based on the number of `,`, `;`, `\t`, and `\n` occurrences in the response. Introduced in GitLab 18.4.
max_http_response_json_depth stringnull Maximum allowed nesting depth in JSON HTTP responses from outbound requests.
max_http_response_json_structural_chars stringnull Maximum allowed object count in JSON HTTP responses from outbound requests. Count is an estimate based on the number of `:`, `,`, `{`, and `[` occurrences in the response. Introduced in GitLab 18.4.
max_http_response_size_limit stringnull Maximum allowed size in MiB for HTTP responses from outbound requests. Set to `0` for unlimited. Applicable for integrations, importers, and webhooks. Introduced in GitLab 18.4.
max_http_response_xml_structural_chars stringnull Maximum allowed object count in XML HTTP responses from outbound requests. Count is an estimate based on the number of `<`, and `=` occurrences in the response. Introduced in GitLab 18.4.
max_login_attempts stringnull Maximum number of sign-in attempts before locking out the user.
max_yaml_depth stringnull Maximum depth of nested CI/CD configuration added with the [`include` keyword](https://docs.gitlab.com/ci/yaml/#include). Default: `100`.
max_yaml_size_bytes stringnull Maximum size in bytes of a single CI/CD configuration file. Default: `2097152`.
minimum_password_length stringnull Indicates whether passwords require a minimum length. Premium and Ultimate only.
mirror_available stringnull If `true`, project Maintainers can configure repository mirroring. If `false`, only administrators can configure repository mirroring.
notify_on_unknown_sign_in stringnull If `true`, sends a notification when a sign-in from an unknown IP address occurs.
offline_transfer_exports_enabled stringnull If `true`, enables exporting GitLab groups and projects by offline transfer. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/work_items/588971) in GitLab 19.3.
offline_transfer_imports_enabled stringnull If `true`, enables importing GitLab groups and projects by offline transfer. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/work_items/588971) in GitLab 19.3.
package_registry_allow_anyone_to_pull_option stringnull If `true`, makes the option to [allow anyone to pull from the package registry](https://docs.gitlab.com/user/packages/package_registry/#allow-anyone-to-pull-from-package-registry) visible and changeab
package_registry_cleanup_policies_worker_capacity stringnull Number of workers assigned to the packages cleanup policies.
pages_domain_verification_enabled stringnull If `true`, requires users to prove ownership of custom domains. Domain verification is an essential security measure for public GitLab sites. Users are required to demonstrate they control a domain be
pages_unique_domain_default_enabled stringnull If `true`, enables unique domains by default for Pages sites to avoid cookie sharing between sites under a given namespace. Defaults to `true`.
plantuml_diagram_proxy_enabled stringnull Enable PlantUML diagram proxy. Default is `false`.
project_hooks_create_limit stringnull Maximum number of project webhooks a user can create per minute for a given project. Default: `5`. Set to `0` to disable limits. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/605597) in G
projects_api_rate_limit_unauthenticated stringnull Maximum number of requests per 10 minutes per IP address for unauthenticated requests to the [list all projects API](https://docs.gitlab.com/api/projects/#list-all-projects). Default: `400`. To disabl
protected_ci_variables stringnull If `true`, CI/CD variables are protected by default.
rate_limiting_response_text stringnull When rate limiting is enabled via the `throttle_*` settings, send this plain text response when a rate limit is exceeded. `Retry later` is sent if this is blank.
receive_max_input_size stringnull Maximum push size (MB).
relation_export_batch_size stringnull Size of each batch when exporting batched relations. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/194607) in GitLab 18.2.
remember_me_enabled stringnull If `true`, enables the [**Remember me** setting](https://docs.gitlab.com/administration/settings/account_and_limit_settings/#configure-the-remember-me-option).
require_admin_two_factor_authentication stringnull Allow administrators to require 2FA for all administrators on the instance.
require_email_verification_on_account_locked stringnull If `true`, all users on the instance must verify their identity after suspicious sign-in activity is detected.
require_sha_for_merge stringnull If `true`, requires a valid commit `sha` for calls to the [merge a merge request](https://docs.gitlab.com/api/merge_requests/#merge-a-merge-request) endpoint. Sets the instance default. [Introduced](h
runner_jobs_endpoints_api_limit stringnull Maximum number of requests per minute per job token for requests to the `/jobs/*` runner jobs API endpoints. Default: `200`. To disable throttling, set to `0`. [Introduced](https://gitlab.com/gitlab-o
runner_jobs_patch_trace_api_limit stringnull Maximum number of requests per minute per runner token for requests to the `PATCH /jobs/:id/trace` runner jobs API endpoint. Default: 2000. To disable throttling, set to 0. [Introduced](https://gitlab
runner_jobs_request_api_limit stringnull Maximum number of requests per minute per runner token for requests to the `/jobs/request` runner jobs API endpoint. Default: `2000`. To disable throttling, set to `0`. [Introduced](https://gitlab.com
search_rate_limit stringnull Maximum number of requests per minute for performing a search while authenticated. Default: `30`. To disable throttling, set to `0`.
search_rate_limit_unauthenticated stringnull Maximum number of requests per minute for performing a search while unauthenticated. Default: `10`. To disable throttling, set to `0`.
sidekiq_job_limiter_compression_threshold_bytes stringnull Threshold in bytes at which Sidekiq jobs are compressed before being stored in Redis. Default: 100,000 bytes (100 KB).
sidekiq_job_limiter_limit_bytes stringnull Threshold in bytes at which Sidekiq jobs are rejected. Default: 0 bytes (doesn't reject any job).
sidekiq_job_limiter_mode stringnull Sets the behavior for Sidekiq job size limits. Default: 'compress'.
sidekiq_timezone_override stringnull IANA timezone identifier (for example, `America/Chicago`) applied to all Sidekiq cron jobs. When blank, no override is applied and cron jobs use the Rails application timezone.
sign_in_restrictions stringnull Application sign in restrictions.
silent_admin_exports_enabled stringnull If `true`, enables [Silent administrator exports](https://docs.gitlab.com/administration/settings/import_and_export_settings/#enable-silent-admin-exports). Default is `false`.
silent_mode_enabled stringnull If `true`, enables [Silent mode](https://docs.gitlab.com/administration/silent_mode/). Default is `false`.
snippet_size_limit stringnull Maximum snippet content size in bytes. Default: 52428800 bytes (50 MB).
snowplow_database_collector_hostname stringnull The Snowplow collector for database events hostname. (for example, `your-db-snowplow-collector.example.com`)
spam_check_api_key stringnull API key used by GitLab for accessing the Spam Check service endpoint.
static_objects_external_storage_auth_token stringnull Authentication token for the external storage linked in `static_objects_external_storage_url`.
static_objects_external_storage_url stringnull URL to an external storage for repository static objects.
terms stringnull (**Required by**: `enforce_terms`) Markdown content for the ToS.
throttle_authenticated_api_enabled stringnull If `true`, enables the authenticated API request rate limit. Helps reduce request volume (for example, from crawlers or abusive bots). Requires `throttle_authenticated_api_period_in_seconds` and `thro
throttle_authenticated_api_period_in_seconds stringnull Rate limit period in seconds.
throttle_authenticated_api_requests_per_period stringnull Maximum requests per period per user.
throttle_authenticated_git_http_enabled stringnull If `true`, enforces the authenticated Git HTTP request rate limit. Default value: `false`.
throttle_authenticated_git_http_period_in_seconds stringnull Rate limit period in seconds. `throttle_authenticated_git_http_enabled` must be `true`. Default value: `3600`.
throttle_authenticated_git_http_requests_per_period stringnull Maximum requests per period per user. `throttle_authenticated_git_http_enabled` must be `true`. Default value: `3600`.
throttle_authenticated_mcp_enabled stringnull If `true`, enforces the rate limit on requests to the MCP Server endpoint, `/api/v4/mcp`, for any HTTP method. Does not apply to other MCP endpoints. Default value: `false`.
throttle_authenticated_mcp_period_in_seconds stringnull Rate limit period in seconds. `throttle_authenticated_mcp_enabled` must be `true`. Default value: `60`.
throttle_authenticated_mcp_requests_per_period stringnull Maximum requests per period per user. `throttle_authenticated_mcp_enabled` must be `true`. Default value: `600`.
throttle_authenticated_dependency_proxy_enabled stringnull If `true`, enforces the authenticated dependency proxy request rate limit. Default value: `false`.
throttle_authenticated_dependency_proxy_period_in_seconds stringnull Rate limit period in seconds. `throttle_authenticated_dependency_proxy_enabled` must be `true`. Default value: `15`.
throttle_authenticated_dependency_proxy_requests_per_period stringnull Maximum requests per period per user. `throttle_authenticated_dependency_proxy_enabled` must be `true`. Default value: `1000`.
throttle_authenticated_packages_api_enabled stringnull If `true`, enables the authenticated package registry API request rate limit. Helps reduce request volume (for example, from crawlers or abusive bots). View [package registry rate limits](https://docs
throttle_authenticated_packages_api_period_in_seconds stringnull Rate limit period in seconds. View [package registry rate limits](https://docs.gitlab.com/rate_limits/api/package-registry/) for more details.
throttle_authenticated_packages_api_requests_per_period stringnull Maximum requests per period per user. View [package registry rate limits](https://docs.gitlab.com/rate_limits/api/package-registry/) for more details.
throttle_authenticated_web_enabled stringnull If `true`, enables the authenticated web request rate limit. Helps reduce request volume (for example, from crawlers or abusive bots). Requires `throttle_authenticated_web_period_in_seconds` and `thro
throttle_authenticated_web_period_in_seconds stringnull Rate limit period in seconds.
throttle_authenticated_web_requests_per_period stringnull Maximum requests per period per user.
throttle_unauthenticated_api_enabled stringnull If `true`, enables the unauthenticated API request rate limit. Helps reduce request volume (for example, from crawlers or abusive bots). Requires `throttle_unauthenticated_api_period_in_seconds` and `
throttle_unauthenticated_api_period_in_seconds stringnull Rate limit period in seconds.
throttle_unauthenticated_api_requests_per_period stringnull Maximum requests per period per IP.
throttle_unauthenticated_enabled stringnull If `true`, enables the unauthenticated web request rate limit. Helps reduce request volume (for example, from crawlers or abusive bots). Requires `throttle_unauthenticated_period_in_seconds` and `thro
throttle_unauthenticated_git_http_enabled stringnull If `true`, enforces the unauthenticated Git HTTP request rate limit. Default value: `false`.
throttle_unauthenticated_git_http_period_in_seconds stringnull Rate limit period in seconds. `throttle_unauthenticated_git_http_enabled` must be `true`. Default value: `3600`.
throttle_unauthenticated_git_http_requests_per_period stringnull Maximum requests per period per IP. `throttle_unauthenticated_git_http_enabled` must be `true`. Default value: `3600`.
throttle_unauthenticated_packages_api_enabled stringnull If `true`, enables the unauthenticated package registry API request rate limit. Helps reduce request volume (for example, from crawlers or abusive bots). View [package registry rate limits](https://do
throttle_unauthenticated_packages_api_period_in_seconds stringnull Rate limit period in seconds. View [package registry rate limits](https://docs.gitlab.com/rate_limits/api/package-registry/) for more details.
throttle_unauthenticated_packages_api_requests_per_period stringnull Maximum requests per period per IP. View [package registry rate limits](https://docs.gitlab.com/rate_limits/api/package-registry/) for more details.
throttle_unauthenticated_period_in_seconds stringnull Rate limit period in seconds. [Deprecated](https://gitlab.com/gitlab-org/gitlab/-/issues/335300) in GitLab 14.3. Use `throttle_unauthenticated_web_period_in_seconds` or `throttle_unauthenticated_api_p
throttle_unauthenticated_requests_per_period stringnull Maximum requests per period per IP. [Deprecated](https://gitlab.com/gitlab-org/gitlab/-/issues/335300) in GitLab 14.3. Use `throttle_unauthenticated_web_requests_per_period` or `throttle_unauthenticat
throttle_unauthenticated_web_enabled stringnull If `true`, enables the unauthenticated web request rate limit. Helps reduce request volume (for example, from crawlers or abusive bots). Requires `throttle_unauthenticated_web_period_in_seconds` and `
throttle_unauthenticated_web_period_in_seconds stringnull Rate limit period in seconds.
throttle_unauthenticated_web_requests_per_period stringnull Maximum requests per period per IP.
time_tracking_limit_to_hours stringnull If `true`, limits display of time tracking units to hours. Default is `false`.
top_level_group_creation_enabled stringnull If `true`, users can create top-level groups with the API. Defaults to `true`.
unique_ips_limit_enabled stringnull If `true`, limits sign-ins from multiple IP addresses. Requires `unique_ips_limit_per_user` and `unique_ips_limit_time_window`.
unique_ips_limit_per_user stringnull Maximum number of IPs per user.
unique_ips_limit_time_window stringnull How many seconds an IP is counted towards the limit.
update_runner_versions_enabled stringnull If `true`, fetches GitLab Runner release version data from GitLab.com. For more information, see how to [determine which runners need to be upgraded](https://docs.gitlab.com/ci/runners/runners_scope/#
use_clickhouse_for_analytics stringnull If `true`, enables ClickHouse as a data source for analytics reports. ClickHouse must be configured for this setting to take effect. Premium and Ultimate only.
user_default_external stringnull If `true`, newly registered users are external by default.
user_default_internal_regex stringnull Specify an email address regex pattern to identify default internal users.
user_defaults_to_private_profile stringnull If `true`, newly created users have a private profile by default. Defaults to `false`.
user_oauth_applications stringnull If `true`, allows users to register any application to use GitLab as an OAuth provider. This setting does not affect group-level OAuth applications.
user_show_add_ssh_key_message stringnull When set to `false` disable the `You won't be able to pull or push repositories via SSH until you add an SSH key to your profile` warning shown to users with no uploaded SSH key.
users_api_limit_followers stringnull Maximum number of requests per minute, per user or IP address. Default: 100. Set to `0` to disable limits. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/181054) in GitLab 17.10.
users_api_limit_following stringnull Maximum number of requests per minute, per user or IP address. Default: 100. Set to `0` to disable limits. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/181054) in GitLab 17.10.
users_api_limit_gpg_key stringnull Maximum number of requests per minute, per user or IP address. Default: 120. Set to `0` to disable limits. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/181054) in GitLab 17.10.
users_api_limit_gpg_keys stringnull Maximum number of requests per minute, per user or IP address. Default: 120. Set to `0` to disable limits. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/181054) in GitLab 17.10.
users_api_limit_status stringnull Maximum number of requests per minute, per user or IP address. Default: 240. Set to `0` to disable limits. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/181054) in GitLab 17.10.
version_check_enabled stringnull If `true`, GitLab informs you when an update is available.
web_hook_event_resend_limit stringnull Maximum number of webhook event resend requests per minute, per user, for a given project or group. Default: `5`. Set to `0` to disable limits. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issu
web_hook_test_limit stringnull Maximum number of webhook test requests per minute, per user, for a given project or group. Default: `5`. Set to `0` to disable limits. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/58788
elasticsearch_aws booleannull If `true`, enables the use of AWS hosted Elasticsearch. Premium and Ultimate only.
elasticsearch_aws_access_key stringnull AWS IAM access key. Premium and Ultimate only.
elasticsearch_aws_region stringnull AWS region where the Elasticsearch domain is configured. Premium and Ultimate only.
elasticsearch_aws_secret_access_key stringnull AWS IAM secret access key. Premium and Ultimate only.
elasticsearch_indexing booleannull If `true`, turns on indexing for advanced search. Premium and Ultimate only.
elasticsearch_search booleannull If `true`, enables Elasticsearch search. Premium and Ultimate only.
elasticsearch_pause_indexing booleannull If `true`, pauses Elasticsearch indexing for both Advanced Search and ActiveContext.
elasticsearch_advanced_search_pause_indexing booleannull If `true`, pauses advanced search indexing.
elasticsearch_url stringnull URL to use for connecting to Elasticsearch. Use a comma-separated list or an array to support clustering (for example, `http://localhost:9200, http://localhost:9201` or `["http://localhost:9200", "htt
elasticsearch_username stringnull Username of your Elasticsearch instance. Premium and Ultimate only.
elasticsearch_password stringnull Password of your Elasticsearch instance. Premium and Ultimate only.
elasticsearch_limit_indexing booleannull If `true`, limits Elasticsearch to index certain namespaces and projects. Premium and Ultimate only.
active_context_pause_indexing booleannull If `true`, pauses ActiveContext indexing.
elasticsearch_namespace_ids arraynull IDs of namespaces to index with Elasticsearch if `elasticsearch_limit_indexing` is enabled. Premium and Ultimate only.
elasticsearch_project_ids arraynull IDs of projects to index with Elasticsearch if `elasticsearch_limit_indexing` is enabled. Premium and Ultimate only.
secret_detection_token_revocation_enabled booleannull If `true`, enables secret detection token revocation.
secret_detection_token_revocation_url stringnull URL that GitLab sends leaked tokens to for revocation.
secret_detection_revocation_token_types_url stringnull URL that returns the token types that can be revoked.
email_additional_text stringnull Additional text added to the bottom of every email for legal/auditing/compliance reasons. Premium and Ultimate only.
default_project_deletion_protection booleannull If `true`, enables default project deletion protection so only administrators can delete projects. GitLab Self-Managed, Premium and Ultimate only.
disable_personal_access_tokens booleannull If `true`, disables personal access tokens. GitLab Self-Managed, Premium and Ultimate only. There is no method available to enable a personal access token that's been disabled through the API. This is
repository_size_limit integernull Size limit per repository (MB). Premium and Ultimate only.
file_template_project_id integernull ID of the project to load custom file templates from. Premium and Ultimate only.
updating_name_disabled_for_users booleannull If `true`, prevents users from updating their profile name.
disable_overriding_approvers_per_merge_request booleannull If `true`, prevents users from overriding approval rules in projects and merge requests.
prevent_merge_requests_author_approval booleannull If `true`, prevents merge request authors from approving their own merge requests.
prevent_merge_requests_committers_approval booleannull If `true`, prevents committers from approving merge requests they contributed to.
maven_package_requests_forwarding booleannull If `true`, forwards Maven package requests to `repo.maven.apache.org` when not found in the GitLab package registry. Premium and Ultimate only.
npm_package_requests_forwarding booleannull If `true`, forwards npm package requests to `npmjs.org` when not found in the GitLab package registry. Premium and Ultimate only.
pypi_package_requests_forwarding booleannull If `true`, forwards PyPI package requests to `pypi.org` when not found in the GitLab package registry. Premium and Ultimate only.
rubygems_package_requests_forwarding booleannull If `true`, forwards RubyGems package requests to `rubygems.org` when not found in the GitLab package registry. Premium and Ultimate only.
virtual_registries_endpoints_api_limit integernull Maximum number of requests on virtual registries endpoints, per IP address, per 15 seconds. Default: 4000. To disable limits, set to `0`. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/521
audit_events_api_limit integernull Maximum number of requests per minute per user to the instance audit events API.
project_audit_events_api_limit integernull Maximum number of requests per minute per user per project to the project audit events API.
group_audit_events_api_limit integernull Maximum number of requests per minute per user per group to the group audit events API.
group_owners_can_manage_default_branch_protection booleannull If `true`, allows group owners to manage default branch protection in their groups. If `false`, group owners cannot override the instance default branch protection. GitLab Self-Managed, Premium and Ul
maintenance_mode booleannull If `true`, puts the instance into maintenance mode. Non-administrator users can sign in with read-only access and make read-only API requests. Premium and Ultimate only.
maintenance_mode_message stringnull Message displayed when instance is in maintenance mode. Premium and Ultimate only.
git_two_factor_session_expiry integernull Maximum duration (in minutes) of a session for Git operations when 2FA is enabled. Premium and Ultimate only.
max_number_of_repository_downloads integernull Maximum number of unique repositories a user can download in the specified time period before they are banned. Default: 0, Maximum: 10,000 repositories. GitLab Self-Managed, Ultimate only.
max_number_of_repository_downloads_within_time_period integernull Reporting time period (in seconds). Default: 0, Maximum: 864000 seconds (10 days). GitLab Self-Managed, Ultimate only.
git_rate_limit_users_allowlist arraynull List of usernames excluded from Git anti-abuse rate limits. Default: `[]`, Maximum: 100 usernames. GitLab Self-Managed, Ultimate only.
git_rate_limit_users_alertlist arraynull List of user IDs that are emailed when the Git abuse rate limit is exceeded. Default: `[]`, Maximum: 100 user IDs. GitLab Self-Managed, Ultimate only.
auto_ban_user_on_excessive_projects_download booleannull If `true`, automatically bans users from the application when they download more than the maximum number of unique projects in the time period specified by `max_number_of_repository_downloads` and `ma
make_profile_private booleannull If `true`, allows users to make their profiles private.
service_access_tokens_expiration_enforced booleannull If `true`, enforces token expiration for service account users. Premium and Ultimate only.
duo_features_enabled booleannull If `true`, enables GitLab Duo features for this instance. GitLab Self-Managed, Premium and Ultimate only.
lock_duo_features_enabled booleannull If `true`, enforces the GitLab Duo features enabled setting for all subgroups. GitLab Self-Managed, Premium and Ultimate only.
disabled_direct_code_suggestions booleannull If `true`, disables direct connections for Code Suggestions for users.
receptive_cluster_agents_enabled booleannull If `true`, enables receptive mode for GitLab agents for Kubernetes.
auto_duo_code_review_enabled booleannull If `true`, enables automatic reviews by GitLab Duo on merge requests.
duo_code_review_decisions_enabled booleannull If `true`, GitLab Duo can approve and request changes on merge requests.
security_scan_stale_after_days integernull Number of days to retain security scan data before purging. Must be between 7 and 90 days. Default: 30 days for GitLab.com, 90 days for GitLab Self-Managed. Premium and Ultimate only. [Introduced](htt
duo_custom_agents_enabled booleannull If `true`, allows custom agents for this instance. Defaults to `true`. GitLab Self-Managed, Premium and Ultimate only. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/work_items/594615) in GitLab
lock_duo_custom_agents_enabled booleannull If `true`, enforces the custom agents enabled setting for all groups. GitLab Self-Managed, Premium and Ultimate only. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/work_items/594615) in GitLab 1
duo_custom_flows_enabled booleannull If `true`, allows custom flows for this instance. Defaults to `true`. GitLab Self-Managed, Premium and Ultimate only. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/work_items/594615) in GitLab 1
lock_duo_custom_flows_enabled booleannull If `true`, enforces the custom flows enabled setting for all groups. GitLab Self-Managed, Premium and Ultimate only. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/work_items/594615) in GitLab 19
duo_external_agents_enabled booleannull If `true`, allows external agents for this instance. Defaults to `true`. GitLab Self-Managed, Premium and Ultimate only. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/work_items/594615) in GitLa
lock_duo_external_agents_enabled booleannull If `true`, enforces the external agents enabled setting for all groups. GitLab Self-Managed, Premium and Ultimate only. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/work_items/594615) in GitLab
duo_remote_flows_enabled booleannull If `true`, enables GitLab Duo remote flows for the instance.
lock_duo_remote_flows_enabled booleannull If `true`, enforces the GitLab Duo remote flows enabled setting for all subgroups.
duo_workflows_default_image_registry stringnull Default container registry for Duo Agent Platform foundational flow images.
ci_telemetry_otel_endpoint stringnull OTEL Collector endpoint URL for CI job telemetry.
ci_job_telemetry_sampling_rate numbernull Sampling rate for CI job telemetry, ranging from 0.0 to 1.0.
duo_namespace_access_rules arraynull Access rules that control which namespaces can access Duo features.
built_in_project_templates_enabled booleannull If `true`, enables built-in project templates when users create projects. Premium and Ultimate only. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/235284) in GitLab 19.0 [with a f
lock_built_in_project_templates_enabled booleannull If `true`, enforces the `built_in_project_templates_enabled` setting for all groups. Premium and Ultimate only. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/235284) in GitLab 19.
duo_template_project_id integernull ID of the project to use as the Duo Code Review custom instructions template for this instance.
use_nats_for_audit_streaming booleannull If `true`, routes audit event streaming through NATS JetStream. NATS must be configured for this setting to take effect. Premium and Ultimate only.
allow_all_integrations stringnull If `true`, allows all integrations on the instance. If `false`, only integrations in `allowed_integrations` are allowed. Ultimate only. [Added](https://gitlab.com/gitlab-org/gitlab/-/issues/500610) in
allow_group_owners_to_manage_ldap stringnull If `true`, allows group owners to manage LDAP. Premium and Ultimate only.
allowed_integrations stringnull When `allow_all_integrations` is `false`, only integrations in this list are allowed on the instance. Ultimate only. [Added](https://gitlab.com/gitlab-org/gitlab/-/issues/500610) in GitLab 17.6.
automatic_purchased_storage_allocation stringnull If `true`, permits automatic allocation of purchased storage in a namespace. Relevant only to EE distributions.
check_namespace_plan stringnull If `true`, makes licensed EE features available to projects only if the project namespace's plan includes the feature or if the project is public. Premium and Ultimate only.
delete_unconfirmed_users stringnull If `true`, deletes users who have not confirmed their email after `unconfirmed_users_delete_after_days` days. Default is `false`. GitLab Self-Managed, Premium and Ultimate only.
disable_invite_members stringnull If `true`, disables the invite members functionality for groups.
elasticsearch_client_adapter stringnull Faraday adapter used by the Elasticsearch Ruby Client. Defaults to `typhoeus`. Possible values are `typhoeus` and `net_http`. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/550805) in GitL
elasticsearch_indexed_field_length_limit stringnull Maximum size of text fields to index by Elasticsearch. A value of `0` means no limit. This does not apply to repository and wiki indexing. Premium and Ultimate only.
elasticsearch_indexed_file_size_limit_kb stringnull Maximum size, in KB, of repository and wiki files that are indexed by Elasticsearch. Premium and Ultimate only.
elasticsearch_max_bulk_concurrency stringnull Maximum concurrency of Elasticsearch bulk requests per indexing operation. This only applies to repository indexing operations. Premium and Ultimate only.
elasticsearch_max_bulk_size_mb stringnull Maximum size of Elasticsearch bulk indexing requests in MB. This only applies to repository indexing operations. Premium and Ultimate only.
elasticsearch_max_code_indexing_concurrency stringnull Maximum concurrency of Elasticsearch code indexing background jobs. This only applies to repository indexing operations. Premium and Ultimate only.
elasticsearch_replicas stringnull Number of replicas for Elasticsearch indices. Use an integer to set all indices to the same value. Use an object to set per-index values. For example: `{"gitlab-production": 1, "gitlab-production-note
elasticsearch_requeue_workers stringnull If `true`, enables automatic requeuing of indexing workers. This improves non-code indexing throughput by enqueuing Sidekiq jobs until all documents are processed. Premium and Ultimate only.
elasticsearch_retry_on_failure stringnull Maximum number of possible retries for Elasticsearch search requests. Premium and Ultimate only.
elasticsearch_shards stringnull Number of shards for Elasticsearch indices. Use an integer to set all indices to the same value. Use an object to set per-index values. For example: `{"gitlab-production": 5, "gitlab-production-notes"
elasticsearch_worker_number_of_shards stringnull Number of indexing worker shards. This improves non-code indexing throughput by enqueuing more parallel Sidekiq jobs. Default is `2`. Premium and Ultimate only.
enforce_namespace_storage_limit stringnull If `true`, enforces namespace storage limits.
enforce_pipl_compliance stringnull If `true`, enforces PIPL compliance on GitLab.com.
geo_node_allowed_ips stringnull Comma-separated list of IPs and CIDRs of allowed secondary nodes. For example, `1.1.1.1, 2.2.2.0/24`. GitLab Self-Managed, Premium and Ultimate only.
geo_status_timeout stringnull Number of seconds after which a request to get a secondary node status times out. GitLab Self-Managed, Premium and Ultimate only.
globally_allowed_ips stringnull Comma-separated list of IP addresses and CIDRs always allowed for inbound traffic. For example, `1.1.1.1, 2.2.2.0/24`.
group_secrets_limit stringnull Maximum number of secrets allowed per group in Secrets Manager. Default: 500. To disable the limit, set to `0`. Ultimate only. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/219436
lock_memberships_to_saml stringnull If `true`, enforces a [global lock on SAML group memberships](https://docs.gitlab.com/user/group/saml_sso/group_sync/#global-saml-group-memberships-lock).
max_personal_access_token_lifetime stringnull Maximum allowable lifetime for access tokens in days. When left blank, default value of 365 is applied. When set, value must be 365 or less. When changed, existing access tokens with an expiration dat
max_ssh_key_lifetime stringnull Maximum allowable lifetime for SSH keys in days. GitLab Self-Managed, Ultimate only. In GitLab 17.6 or later, the maximum lifetime limit can be [extended to 400 days](https://gitlab.com/gitlab-org/git
mirror_capacity_threshold stringnull Minimum capacity to be available before scheduling more mirrors preemptively. Premium and Ultimate only.
mirror_max_capacity stringnull Maximum number of mirrors that can be synchronizing at the same time. Premium and Ultimate only.
mirror_max_delay stringnull Maximum time (in minutes) between updates that a mirror can have when scheduled to synchronize. Premium and Ultimate only.
package_metadata_purl_types stringnull List of [package registry metadata to sync](https://docs.gitlab.com/administration/settings/security_and_compliance/#choose-package-registry-metadata-to-sync). See [the list](https://gitlab.com/gitlab
password_lowercase_required stringnull If `true`, passwords require at least one lowercase letter. Premium and Ultimate only.
password_number_required stringnull If `true`, passwords require at least one number. Premium and Ultimate only.
password_symbol_required stringnull If `true`, passwords require at least one symbol character. Premium and Ultimate only.
password_uppercase_required stringnull If `true`, passwords require at least one uppercase letter. Premium and Ultimate only.
project_secrets_limit stringnull Maximum number of secrets allowed per project in Secrets Manager. Default: 100. To disable the limit, set to `0`. Ultimate only. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/2194
scan_execution_policies_action_limit stringnull Maximum number of `actions` per scan execution policy. Defaults to `0` and cannot be set above `20`.
scan_execution_policies_schedule_limit stringnull Maximum number of `type: schedule` rules per scan execution policy. Defaults to `0` and cannot be set above `20`.
secret_push_protection_available stringnull If `true`, allows projects to enable secret push protection. This does not enable secret push protection. Ultimate only.
security_approval_policies_limit stringnull Maximum number of active merge request approval policies per security policy project. Defaults to `5` and cannot be set above `20`.
security_mr_report_cache_lifetime_minutes stringnull Number of minutes to cache security reports on merge requests (10-60). Default: 10. Premium and Ultimate only. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/223399) in GitLab 18.1
shared_runners_minutes stringnull Set the maximum number of compute minutes that a group can use on instance runners per month. Premium and Ultimate only.
unconfirmed_users_delete_after_days stringnull Specifies how many days after account creation to delete users who have not confirmed their email. Only applicable if `delete_unconfirmed_users` is set to `true`. Must be `1` or greater. Default is `7
allow_possible_spam stringnull
import_jobs_concurrency_limit stringnull
deny_all_requests_except_allowed stringnull
block_jwt_for_reclaimed_paths stringnull
root_moved_permanently_redirection stringnull
domain_denylist_raw stringnull
domain_allowlist_raw stringnull
outbound_local_requests_allowlist_raw stringnull
enforce_ci_inbound_job_token_scope_enabled stringnull
enforce_email_subaddress_restrictions stringnull
error_tracking_enabled stringnull
error_tracking_api_url stringnull
force_pages_access_control stringnull
jira_connect_additional_audience_url stringnull
math_rendering_limits_enabled stringnull
max_artifacts_content_include_size stringnull
organization_cluster_agent_authorization_enabled stringnull
instance_token_prefix stringnull
pages_extra_deployments_default_expiry_seconds stringnull
throttle_authenticated_git_lfs_enabled stringnull
throttle_authenticated_git_lfs_period_in_seconds stringnull
throttle_authenticated_git_lfs_requests_per_period stringnull
throttle_authenticated_files_api_enabled stringnull
throttle_authenticated_files_api_period_in_seconds stringnull
throttle_authenticated_files_api_requests_per_period stringnull
throttle_authenticated_deprecated_api_enabled stringnull
throttle_authenticated_deprecated_api_period_in_seconds stringnull
throttle_authenticated_deprecated_api_requests_per_period stringnull
throttle_unauthenticated_files_api_enabled stringnull
throttle_unauthenticated_files_api_period_in_seconds stringnull
throttle_unauthenticated_files_api_requests_per_period stringnull
throttle_unauthenticated_deprecated_api_enabled stringnull
throttle_unauthenticated_deprecated_api_period_in_seconds stringnull
throttle_unauthenticated_deprecated_api_requests_per_period stringnull
throttle_protected_paths_enabled stringnull
throttle_protected_paths_period_in_seconds stringnull
throttle_protected_paths_requests_per_period stringnull
protected_paths_raw stringnull
protected_paths_for_get_request_raw stringnull
usage_ping_generation_enabled stringnull
usage_ping_features_enabled stringnull
project_create_limit stringnull
group_create_limit stringnull
notes_create_limit stringnull
notes_create_limit_allowlist_raw stringnull
members_delete_limit stringnull
project_import_limit stringnull
project_export_limit stringnull
project_download_export_limit stringnull
group_import_limit stringnull
group_export_limit stringnull
group_download_export_limit stringnull
resource_access_token_notify_inherited stringnull
lock_resource_access_token_notify_inherited stringnull
sentry_enabled stringnull
sentry_dsn stringnull
sentry_clientside_dsn stringnull
sentry_environment stringnull
sentry_clientside_traces_sample_rate stringnull
search_rate_limit_allowlist_raw stringnull
users_get_by_id_limit_allowlist_raw stringnull
invitation_flow_enforcement stringnull
can_create_organization stringnull
concurrent_relation_export_limit stringnull
allow_contribution_mapping_to_admins stringnull
deactivation_email_additional_text stringnull
group_api_limit stringnull
group_archive_unarchive_api_limit stringnull
group_invited_groups_api_limit stringnull
group_shared_groups_api_limit stringnull
group_projects_api_limit stringnull
groups_api_limit stringnull
project_api_limit stringnull
project_invited_groups_api_limit stringnull
project_repositories_blame_limit stringnull
project_repositories_blame_unauthenticated_limit stringnull
project_repositories_blobs_batch_limit stringnull
projects_api_limit stringnull
project_members_api_limit stringnull
create_organization_api_limit stringnull
user_contributed_projects_api_limit stringnull
user_projects_api_limit stringnull
user_starred_projects_api_limit stringnull
users_api_limit_ssh_keys stringnull
users_api_limit_ssh_key stringnull
tags_create_limit stringnull
observability_backend_ssl_verification_enabled stringnull
global_search_snippet_titles_enabled stringnull
global_search_users_enabled stringnull
global_search_groups_enabled stringnull
global_search_work_items_enabled stringnull
global_search_merge_requests_enabled stringnull
global_search_block_anonymous_searches_enabled stringnull
vscode_extension_marketplace_enabled stringnull
vscode_extension_marketplace_extension_host_domain stringnull
vscode_extension_marketplace_single_origin_fallback_enabled stringnull
reindexing_minimum_index_size stringnull
reindexing_minimum_relative_bloat_size stringnull
anonymous_searches_allowed stringnull
default_search_scope stringnull
delay_user_account_self_deletion stringnull
background_operations_max_jobs stringnull
pg_ash_sampling_enabled stringnull
pg_ash_sample_interval_seconds stringnull
enforce_granular_tokens stringnull
granular_tokens_enforced_after stringnull
deactivate_dormant_users stringnull
deactivate_dormant_users_period stringnull
nuget_skip_metadata_url_validation stringnull
helm_max_packages_count stringnull
mcp_server_enabled stringnull
dynamic_client_registration_enabled stringnull
ci_cd_catalog_projects_allowlist stringnull
ci_cd_catalog_projects_allowlist_raw stringnull
duo_chat_expiration_column stringnull
duo_chat_expiration_days stringnull
elasticsearch_aws_role_arn stringnull
elasticsearch_client_request_timeout stringnull
elasticsearch_indexing_timeout_minutes stringnull
elasticsearch_analyzers_smartcn_enabled stringnull
elasticsearch_analyzers_smartcn_search stringnull
elasticsearch_analyzers_kuromoji_enabled stringnull
elasticsearch_analyzers_kuromoji_search stringnull
elasticsearch_code_scope stringnull
instance_level_ai_beta_features_enabled stringnull
lock_memberships_to_ldap stringnull
lock_model_prompt_cache_enabled stringnull
model_prompt_cache_enabled stringnull
search_max_shard_size_gb stringnull
search_max_docs_denominator stringnull
search_min_docs_before_rollover stringnull
secret_detection_token_revocation_token stringnull
throttle_incident_management_notification_enabled stringnull
throttle_incident_management_notification_per_period stringnull
throttle_incident_management_notification_period_in_seconds stringnull
product_analytics_enabled stringnull
product_analytics_data_collector_host stringnull
product_analytics_configurator_connection_string stringnull
cube_api_base_url stringnull
cube_api_key stringnull
duo_availability stringnull
duo_agent_platform_enabled stringnull
duo_cli_enabled stringnull
ai_audit_events_streaming_enabled stringnull
duo_token_usage_tracking_enabled stringnull
duo_remote_flows_availability stringnull
duo_foundational_flows_enabled stringnull
duo_foundational_flows_availability stringnull
duo_custom_agents_availability stringnull
duo_custom_flows_availability stringnull
duo_external_agents_availability stringnull
tool_approval_for_session_enabled stringnull
tool_approval_for_session_availability stringnull
duo_auto_mode_enabled stringnull
duo_auto_mode_availability stringnull
enabled_expanded_logging stringnull
foundational_agents_default_enabled stringnull
foundational_agents_statuses stringnull
zoekt_indexing_enabled stringnull
zoekt_search_enabled stringnull
zoekt_indexing_paused stringnull
zoekt_auto_index_root_namespace stringnull
zoekt_cache_response stringnull
zoekt_cpu_to_tasks_ratio stringnull
zoekt_force_reindexing_percentage stringnull
zoekt_indexing_parallelism stringnull
zoekt_rollout_batch_size stringnull
zoekt_lost_node_threshold stringnull
zoekt_indexing_timeout stringnull
zoekt_maximum_files stringnull
zoekt_indexed_file_size_limit stringnull
zoekt_trigram_max stringnull
zoekt_rollout_retry_interval stringnull
zoekt_default_number_of_replicas stringnull
zoekt_max_projects_for_legacy_search stringnull
zoekt_max_restarts_15m stringnull
zoekt_initial_indexing_limit stringnull
orbit_auto_index_root_namespace stringnull
orbit_dap_enabled_by_default stringnull
duo_workflow_oauth_application_id stringnull
pipeline_execution_policies_per_configuration_limit stringnull
scan_execution_policies_per_configuration_limit stringnull
vulnerability_management_policies_per_configuration_limit stringnull
dependency_firewall_policies_per_configuration_limit stringnull
policy_store_experiment_enabled stringnull
secret_detection_service_auth_token stringnull
secret_detection_service_url stringnull
fetch_observability_alerts_from_cloud stringnull
global_search_code_enabled stringnull
global_search_commits_enabled stringnull
global_search_wiki_enabled stringnull
global_search_limited_indexing_enabled stringnull
elastic_migration_worker_enabled stringnull
display_gitlab_credits_user_data stringnull
vac_project_ids_raw stringnull
enable_member_promotion_management stringnull
allow_deploy_tokens_and_keys_with_external_authn stringnull
allow_top_level_group_owners_to_create_service_accounts stringnull
dependency_scanning_sbom_scan_api_upload_limit stringnull
dependency_scanning_sbom_scan_api_download_limit stringnull
auto_duo_code_review_on_push_enabled stringnull
View JSON Schema on GitHub

JSON Schema

gitlab-put-api-v4-application-settings-request-schema.json Raw ↑
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/gitlab/json-schema/gitlab-put-api-v4-application-settings-request-schema.json",
  "title": "putApiV4ApplicationSettingsRequest",
  "x-generated": "2026-11-05",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/gitlab-rest-api-openapi.yml#/components/schemas/putApiV4ApplicationSettingsRequest",
  "type": "object",
  "properties": {
    "admin_mode": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, requires administrators to re-authenticate before performing potentially dangerous administrative operations."
    },
    "admin_notification_email": {
      "type": [
        "string",
        "null"
      ],
      "description": "If set, [abuse reports](https://docs.gitlab.com/administration/review_abuse_reports/) are sent to this address. Abuse reports are always available in the **Admin** area. Deprecated. Use `abuse_notification_email` instead."
    },
    "abuse_notification_email": {
      "type": [
        "string",
        "null"
      ],
      "description": "If set, [abuse reports](https://docs.gitlab.com/administration/review_abuse_reports/) are sent to this address. Abuse reports are always available in the **Admin** area."
    },
    "after_sign_up_text": {
      "type": [
        "string",
        "null"
      ],
      "description": "Text shown after sign up."
    },
    "after_sign_out_path": {
      "type": [
        "string",
        "null"
      ],
      "description": "Users are redirected to this page after they sign out."
    },
    "akismet_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, helps prevent bots from creating issues. Requires `akismet_api_key`."
    },
    "akismet_api_key": {
      "type": [
        "string",
        "null"
      ],
      "description": "Generate API key at http://www.akismet.com"
    },
    "asset_proxy_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "Enable proxying of assets"
    },
    "asset_proxy_url": {
      "type": [
        "string",
        "null"
      ],
      "description": "URL of the asset proxy server"
    },
    "asset_proxy_secret_key": {
      "type": [
        "string",
        "null"
      ],
      "description": "Shared secret with the asset proxy server"
    },
    "asset_proxy_whitelist": {
      "type": [
        "array",
        "null"
      ],
      "items": {
        "type": "string"
      },
      "description": "Assets that match these domains are not proxied. Wildcards allowed. Your GitLab installation URL is automatically allowlisted. GitLab restart is required to apply changes. Deprecated. Use `asset_proxy_allowlist` instead."
    },
    "asset_proxy_allowlist": {
      "type": [
        "array",
        "null"
      ],
      "items": {
        "type": "string"
      },
      "description": "Assets that match these domains are not proxied. Wildcards allowed. Your GitLab installation URL is automatically allowlisted. GitLab restart is required to apply changes."
    },
    "authn_data_retention_cleanup_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, runs cleanup workers that permanently delete authentication login history older than one year, and previously revoked OAuth access tokens and grants older than one month. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/work_items/579002) in GitLab 18.7."
    },
    "container_registry_token_expire_delay": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Duration, in minutes, that container registry authorization tokens remain valid."
    },
    "oauth_access_token_expires_in": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Maximum lifetime in seconds of all new OAuth access tokens issued by the instance. Minimum value: `300` (5 minutes). Default value: `7200` (2 hours). If blank or `null`, uses default value. Does not affect existing OAuth access tokens."
    },
    "decompress_archive_file_timeout": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Timeout for decompressing archived files, in seconds. Set to `0` to disable the timeout."
    },
    "default_artifacts_expire_in": {
      "type": [
        "string",
        "null"
      ],
      "description": "Set the default expiration time for each job's artifacts."
    },
    "default_ci_config_path": {
      "type": [
        "string",
        "null"
      ],
      "description": "Default CI/CD configuration file and path for new projects. If empty, new projects use `.gitlab-ci.yml`."
    },
    "default_project_creation": {
      "type": [
        "integer",
        "null"
      ],
      "enum": [
        0,
        3,
        4,
        1,
        2
      ],
      "description": "Default minimum role required to create projects. Can take: `0` _(No one)_, `1` _(Maintainers)_, `2` _(Developers)_, `3` _(Administrators)_, or `4` _(Owners)_."
    },
    "default_remove_source_branch_after_merge": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "Enable the delete source branch option by default for new projects"
    },
    "default_branch_protection": {
      "type": [
        "integer",
        "null"
      ],
      "enum": [
        0,
        3,
        1,
        2,
        4
      ],
      "description": "Level of protection for the default branch. [Deprecated](https://gitlab.com/gitlab-org/gitlab/-/issues/408314) in GitLab 17.0. Use `default_branch_protection_defaults` instead."
    },
    "default_branch_protection_defaults": {
      "type": [
        "object",
        "null"
      ],
      "description": "Default branch protection settings. For available options, see [Options for `default_branch_protection_defaults`](https://docs.gitlab.com/api/groups/#options-for-default_branch_protection_defaults). [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/408314) in GitLab 17.0.",
      "properties": {
        "allowed_to_push": {
          "type": [
            "array",
            "null"
          ],
          "description": "Array of access levels allowed to push to the default branch.",
          "items": {
            "type": "object",
            "properties": {
              "access_level": {
                "type": "integer",
                "enum": [
                  30,
                  40,
                  60,
                  0
                ],
                "description": "Access level allowed to push to the default branch."
              }
            },
            "required": [
              "access_level"
            ]
          }
        },
        "allow_force_push": {
          "type": [
            "boolean",
            "null"
          ],
          "description": "If `true`, allows force push for all users with push access."
        },
        "allowed_to_merge": {
          "type": [
            "array",
            "null"
          ],
          "description": "Array of access levels allowed to merge into the default branch.",
          "items": {
            "type": "object",
            "properties": {
              "access_level": {
                "type": "integer",
                "enum": [
                  30,
                  40,
                  60,
                  0
                ],
                "description": "Access level allowed to merge into the default branch."
              }
            },
            "required": [
              "access_level"
            ]
          }
        },
        "code_owner_approval_required": {
          "type": [
            "boolean",
            "null"
          ],
          "description": "Require approval from code owners"
        },
        "developer_can_initial_push": {
          "type": [
            "boolean",
            "null"
          ],
          "description": "If `true`, allows developers to make the initial push."
        }
      }
    },
    "default_group_visibility": {
      "type": [
        "string",
        "null"
      ],
      "enum": [
        "private",
        "internal",
        "public"
      ],
      "description": "What visibility level new groups receive. Default is `private`. Cannot be set to any levels in `restricted_visibility_levels`."
    },
    "default_project_visibility": {
      "type": [
        "string",
        "null"
      ],
      "enum": [
        "private",
        "internal",
        "public"
      ],
      "description": "What visibility level new projects receive. Default is `private`. Cannot be set to any levels in `restricted_visibility_levels`."
    },
    "default_projects_limit": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Maximum number of personal projects per user. Default is `100000`."
    },
    "default_snippet_visibility": {
      "type": [
        "string",
        "null"
      ],
      "enum": [
        "private",
        "internal",
        "public"
      ],
      "description": "What visibility level new snippets receive. Default is `private`."
    },
    "dependency_management_settings": {
      "type": [
        "object",
        "null"
      ],
      "description": "Dependency management settings. Set `security_update_scheduler_max_concurrency` (integer) to cap the number of security update scheduler jobs that run concurrently across the Sidekiq fleet. Default: `30`. Capped at `200`. Set to `0` to remove the concurrency limit. Ultimate only. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/239173) in GitLab 19.1.",
      "properties": {
        "security_update_scheduler_max_concurrency": {
          "type": [
            "integer",
            "null"
          ],
          "description": "Maximum number of dependency management security update scheduler jobs to run concurrently across the Sidekiq fleet."
        }
      }
    },
    "disable_admin_oauth_scopes": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "Stop administrators from connecting to non-trusted OAuth applications."
    },
    "disable_feed_token": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "Disable display of RSS/Atom and Calendar `feed_tokens`"
    },
    "disabled_oauth_sign_in_sources": {
      "type": [
        "array",
        "null"
      ],
      "items": {
        "type": "string"
      },
      "description": "OAuth sign-in sources to disable."
    },
    "domain_denylist_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, enables the domain denylist for sign-ups. Requires `domain_denylist`."
    },
    "domain_denylist": {
      "type": [
        "array",
        "null"
      ],
      "items": {
        "type": "string"
      },
      "description": "Users with e-mail addresses that match these domain(s) will NOT be able to sign-up. Wildcards allowed. Enter multiple entries on separate lines. Ex: domain.com, *.domain.com"
    },
    "domain_allowlist": {
      "type": [
        "array",
        "null"
      ],
      "items": {
        "type": "string"
      },
      "description": "Only users with email addresses that match these domains can sign up. Wildcards allowed. For example, `domain.com` or `*.domain.com`. If empty, all domains are allowed."
    },
    "outbound_local_requests_whitelist": {
      "type": [
        "array",
        "null"
      ],
      "items": {
        "type": "string"
      },
      "description": "List of trusted domains or IP addresses to which local requests are allowed when local requests for webhooks and integrations are disabled."
    },
    "email_otp_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, enables email-based one-time passwords (OTP) as a multi-factor authentication method. Requires `require_email_verification_on_account_locked` to be `true`."
    },
    "iframe_rendering_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, allows rendering of iframes in Markdown."
    },
    "iframe_rendering_allowlist": {
      "type": [
        "array",
        "null"
      ],
      "items": {
        "type": "string"
      },
      "description": "IDs of embed providers users can embed content from. Enter multiple entries separated by commas or on separate lines."
    },
    "iframe_rendering_allowlist_raw": {
      "type": [
        "string",
        "null"
      ],
      "description": "Raw newline- or comma-separated list of IDs of embed providers users can embed content from."
    },
    "eks_integration_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "Enable integration with Amazon EKS"
    },
    "eks_account_id": {
      "type": [
        "string",
        "null"
      ],
      "description": "Amazon account ID for EKS integration."
    },
    "eks_access_key_id": {
      "type": [
        "string",
        "null"
      ],
      "description": "Access key ID for the EKS integration IAM user."
    },
    "eks_secret_access_key": {
      "type": [
        "string",
        "null"
      ],
      "description": "Secret access key for the EKS integration IAM user."
    },
    "email_author_in_body": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, includes the name of the issue, merge request, or comment author in the email body. Useful when email servers do not support overriding the sender name."
    },
    "email_confirmation_setting": {
      "type": [
        "string",
        "null"
      ],
      "enum": [
        "off",
        "soft",
        "hard"
      ],
      "description": "Specifies whether users must confirm their email address before signing in. `off` does not require confirmation, `soft` allows sign-in during a confirmation period, and `hard` requires confirmation before sign-in."
    },
    "enabled_git_access_protocol": {
      "type": [
        "string",
        "null"
      ],
      "enum": [
        "ssh",
        "http",
        "all"
      ],
      "description": "Protocol allowed for Git access. Set to `all` to allow both SSH and HTTP(S)."
    },
    "gitpod_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, enables [Ona integration](https://docs.gitlab.com/integration/gitpod/). Requires `gitpod_url`."
    },
    "gitpod_url": {
      "type": [
        "string",
        "null"
      ],
      "description": "Ona instance URL for the integration."
    },
    "gitaly_timeout_default": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Default Gitaly timeout, in seconds. Set to `0` to disable timeouts."
    },
    "gitaly_timeout_fast": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Gitaly fast operation timeout, in seconds. Set to 0 to disable timeouts."
    },
    "gitaly_timeout_medium": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Medium Gitaly timeout, in seconds. Set to 0 to disable timeouts."
    },
    "grafana_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, enables Grafana."
    },
    "grafana_url": {
      "type": [
        "string",
        "null"
      ],
      "description": "Grafana URL."
    },
    "gravatar_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, enables the Gravatar service."
    },
    "help_page_hide_commercial_content": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, hides marketing-related entries from help."
    },
    "help_page_support_url": {
      "type": [
        "string",
        "null"
      ],
      "description": "Alternate support URL for help page and help dropdown."
    },
    "help_page_documentation_base_url": {
      "type": [
        "string",
        "null"
      ],
      "description": "Alternate documentation pages URL."
    },
    "help_page_text": {
      "type": [
        "string",
        "null"
      ],
      "description": "Custom text displayed on the help page."
    },
    "home_page_url": {
      "type": [
        "string",
        "null"
      ],
      "description": "Users who are not signed in are redirected to this page."
    },
    "housekeeping_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "Enable automatic repository housekeeping (git repack, git gc)"
    },
    "housekeeping_full_repack_period": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Number of Git pushes after which a full `git repack` is run. Deprecated. Use `housekeeping_optimize_repository_period` instead. All or none of `housekeeping_full_repack_period`, `housekeeping_gc_period`, `housekeeping_incremental_repack_period` must be provided."
    },
    "housekeeping_gc_period": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Number of Git pushes after which `git gc` is run. Deprecated. Use `housekeeping_optimize_repository_period` instead. All or none of `housekeeping_full_repack_period`, `housekeeping_gc_period`, `housekeeping_incremental_repack_period` must be provided."
    },
    "housekeeping_incremental_repack_period": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Number of Git pushes after which an incremental `git repack` is run. Deprecated. Use `housekeeping_optimize_repository_period` instead. Exactly one of `housekeeping_incremental_repack_period`, `housekeeping_optimize_repository_period` must be provided. All or none of `housekeeping_full_repack_period`, `housekeeping_gc_period`, `housekeeping_incremental_repack_period` must be provided."
    },
    "housekeeping_optimize_repository_period": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Number of Git pushes after which Gitaly is asked to optimize a repository. Exactly one of `housekeeping_incremental_repack_period`, `housekeeping_optimize_repository_period` must be provided."
    },
    "html_emails_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, sends emails in both HTML and plain text formats. If `false`, sends emails in plain text only. Defaults to `true`."
    },
    "import_sources": {
      "type": [
        "array",
        "null"
      ],
      "items": {
        "type": "string",
        "enum": [
          "github",
          "bitbucket",
          "bitbucket_server",
          "fogbugz",
          "git",
          "gitlab_project",
          "gitea",
          "manifest"
        ]
      },
      "description": "Sources to allow project import from. OmniAuth must be configured for GitHub, Bitbucket, and GitLab.com."
    },
    "invisible_captcha_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, enables Invisible CAPTCHA spam detection during account creation."
    },
    "max_artifacts_size": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Maximum file size, in MB, for each job's artifacts."
    },
    "max_attachment_size": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Maximum attachment size in MB."
    },
    "max_export_size": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Maximum export size in MB"
    },
    "max_github_response_size_limit": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Maximum size in MB for GitHub API responses. Set to `0` for unlimited size."
    },
    "max_github_response_json_value_count": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Maximum object count for GitHub API responses. Set to `0` for unlimited. The count is an estimate based on the number of `:`, `,`, `{`, and `[` characters in the response."
    },
    "max_import_size": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Maximum import size in MB"
    },
    "max_import_remote_file_size": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Maximum remote file size in MB for imports from external object storages"
    },
    "max_decompressed_archive_size": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Maximum decompressed file size for imported archives in MB. Set to `0` for unlimited. Default is `25600`."
    },
    "max_pages_size": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Maximum size of each GitLab Pages site in MB. Set to `0` to allow up to 1 TB."
    },
    "max_pages_custom_domains_per_project": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Maximum number of GitLab Pages custom domains per project"
    },
    "max_terraform_state_size_bytes": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Maximum size of the Terraform state file in bytes. Set to `0` for unlimited size."
    },
    "metrics_method_call_threshold": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Method call is only tracked if it takes longer than this threshold, in milliseconds."
    },
    "password_authentication_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "Flag indicating if password authentication is enabled for the web interface. Mutually exclusive with `password_authentication_enabled_for_web`, `signin_enabled`."
    },
    "password_authentication_enabled_for_web": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, enables authentication for the web interface via a GitLab account password. Defaults to `true`. Mutually exclusive with `password_authentication_enabled`, `signin_enabled`."
    },
    "signin_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, enables password authentication for the web interface. Deprecated. Use `password_authentication_enabled_for_web` instead. Mutually exclusive with `password_authentication_enabled_for_web`, `password_authentication_enabled`."
    },
    "password_authentication_enabled_for_git": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, enables authentication for Git over HTTP(S) via a GitLab account password. Defaults to `true`."
    },
    "performance_bar_allowed_group_id": {
      "type": [
        "string",
        "null"
      ],
      "description": "Path of the group that is allowed to toggle the performance bar. Deprecated. Use `performance_bar_allowed_group_path` instead."
    },
    "performance_bar_allowed_group_path": {
      "type": [
        "string",
        "null"
      ],
      "description": "Path of the group that is allowed to toggle the performance bar."
    },
    "performance_bar_enabled": {
      "type": [
        "string",
        "null"
      ],
      "description": "Deprecated: Pass `performance_bar_allowed_group_path: nil` instead. Allow enabling the performance."
    },
    "personal_access_token_prefix": {
      "type": [
        "string",
        "null"
      ],
      "description": "Prefix to prepend to all personal access tokens."
    },
    "require_personal_access_token_expiry": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, requires an expiration date on group and project access tokens, and on personal access tokens not owned by service accounts."
    },
    "kroki_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, enables [Kroki integration](https://docs.gitlab.com/administration/integration/kroki/). Requires `kroki_url`."
    },
    "kroki_url": {
      "type": [
        "string",
        "null"
      ],
      "description": "Kroki server URL."
    },
    "plantuml_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, enables [PlantUML integration](https://docs.gitlab.com/administration/integration/plantuml/). Requires `plantuml_url`."
    },
    "plantuml_url": {
      "type": [
        "string",
        "null"
      ],
      "description": "The PlantUML server URL"
    },
    "diagramsnet_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, enables [Diagrams.net integration](https://docs.gitlab.com/administration/integration/diagrams_net/). Requires `diagramsnet_url`. Defaults to `true`."
    },
    "diagramsnet_url": {
      "type": [
        "string",
        "null"
      ],
      "description": "The Diagrams.net server URL"
    },
    "polling_interval_multiplier": {
      "type": [
        "number",
        "null"
      ],
      "description": "Interval multiplier used by endpoints that perform polling. Set to `0` to disable polling."
    },
    "project_export_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, enables project export."
    },
    "prometheus_metrics_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, enables Prometheus metrics."
    },
    "push_event_hooks_limit": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Maximum number of changes (branches or tags) in a single push above which webhooks and integrations are not triggered. Setting to `0` does not disable throttling. Default: `3`."
    },
    "push_event_activities_limit": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Maximum number of changes (branches or tags) in a single push above which a bulk push event is created. Setting to `0` does not disable throttling."
    },
    "recaptcha_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, enables reCAPTCHA. Requires `recaptcha_private_key` and `recaptcha_site_key`."
    },
    "recaptcha_site_key": {
      "type": [
        "string",
        "null"
      ],
      "description": "Generate site key at http://www.google.com/recaptcha"
    },
    "recaptcha_private_key": {
      "type": [
        "string",
        "null"
      ],
      "description": "Generate private key at http://www.google.com/recaptcha"
    },
    "login_recaptcha_protection_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "Helps prevent brute-force attacks"
    },
    "repository_checks_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, GitLab periodically runs `git fsck` in all project and wiki repositories to look for silent disk corruption issues."
    },
    "repository_storages_weighted": {
      "type": [
        "object",
        "null"
      ],
      "additionalProperties": {
        "type": "integer"
      },
      "description": "Hash of names of storages taken from `gitlab.yml` to [weights](https://docs.gitlab.com/administration/repository_storage_paths/#configure-where-new-repositories-are-stored) ranging from 0 to 100. New projects are created in one of these stores, chosen by a weighted random selection."
    },
    "require_two_factor_authentication": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, requires all users to set up two-factor authentication. Requires `two_factor_grace_period`."
    },
    "two_factor_grace_period": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Amount of time, in hours, that users can skip enforced two-factor authentication setup."
    },
    "restricted_visibility_levels": {
      "type": [
        "array",
        "null"
      ],
      "items": {
        "type": "string"
      },
      "description": "Selected levels cannot be used by non-administrator users for groups, projects, or snippets. Can take `private`, `internal`, and `public` as a parameter. If the `public` level is restricted, user profiles are only visible to signed-in users. If empty, no levels are restricted. Cannot select levels that are set as `default_project_visibility` and `default_group_visibility`."
    },
    "session_expire_delay": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Session duration in minutes. Requires a GitLab restart to apply changes."
    },
    "session_expire_from_init": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, sessions expire a number of minutes after the session was created rather than after the last activity. The session lifetime is defined by `session_expire_delay`."
    },
    "shared_runners_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "Enable shared runners for new projects"
    },
    "shared_runners_text": {
      "type": [
        "string",
        "null"
      ],
      "description": "Shared runners text "
    },
    "valid_runner_registrars": {
      "type": [
        "array",
        "null"
      ],
      "items": {
        "type": "string"
      },
      "description": "List of types which are allowed to register a GitLab Runner. Can be `[]`, `['group']`, `['project']`, or `['group', 'project']`."
    },
    "signup_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, enables registration. Defaults to `true`."
    },
    "sourcegraph_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, enables Sourcegraph integration. Requires `sourcegraph_url`."
    },
    "sourcegraph_public_only": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, blocks Sourcegraph from being loaded on private and internal projects. Defaults to `true`."
    },
    "sourcegraph_url": {
      "type": [
        "string",
        "null"
      ],
      "description": "Configured Sourcegraph instance URL."
    },
    "spam_check_endpoint_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "Enable Spam Check via external API endpoint"
    },
    "spam_check_endpoint_url": {
      "type": [
        "string",
        "null"
      ],
      "description": "URL of the external Spamcheck service endpoint. Valid URI schemes are `grpc` or `tls`. Specifying `tls` forces communication to be encrypted."
    },
    "terminal_max_session_time": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Maximum time for a web terminal WebSocket connection, in seconds. Set to `0` for unlimited time."
    },
    "usage_ping_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "Every week GitLab will report license usage back to GitLab, Inc."
    },
    "local_markdown_version": {
      "type": [
        "integer",
        "null"
      ],
      "description": "Local Markdown version. Increase this value to invalidate all cached Markdown."
    },
    "allow_local_requests_from_hooks_and_services": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "If `true`, allows requests to the local network from webhooks and integrations. Deprecated. Use `allow_local_requests_from_web_hooks_and_services` instead."
    },
    "mailgun_events_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "Enable Mailgun event receiver"
    },
    "mailgun_signing_key": {
      "type": [
        "string",
        "null"
      ],
      "description": "Mailgun HTTP webhook signing key for receiving events from webhook."
    },
    "snowplow_enabled": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "Enable Snowplow tracking"
    },
    "snowplow_collector_hostname": {
      "type": [
        "string",
        "null"
      ],
      "description": "The Snowplow collector hostname"
    },
    "snowplow_cookie_domain": {
      "type": [
        "string",
        "null"
      ],
      "description": "Snowplow cookie domain, for example `.gitlab.com`."
    },
    "snowplow_app_id": {
      "type": [
        "string",
        "null"
 

# --- truncated at 32 KB (148 KB total) ---
# Full source: https://artifacts.apis.io/gitlab/json-schema/gitlab-put-api-v4-application-settings-request-schema.json

Work with this as data

Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for schemas

4 MCP tools reach this
  • find_json_schemasBrowse and filter every JSON Schema in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This JSON Schema
curl "https://apis.io/api/v1/json-schemas/gitlab-put-api-v4-application-settings-request"
All schemas
curl "https://apis.io/api/v1/json-schemas?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.