Go datasource fails to process dependency located on self-hosted gitlab on http

[fogrye]

What would you like help with?

I think I found a bug

How are you running Renovate?

Self-hosted

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

Gitlab, dev-master

Please tell us more about your question or problem

We are using self-hosted gitlab under VPN with custom domain which makes it impossible to use https because any browser will mark the certificate as invalid. So any requests are done via http and it works correct with renovate except go projects. I believe that issue is in this line. I wonder if it possible to fix this line because renovate knows gitlab's base url part and should consider which type of connection is used. Anyway thx for such awesome project.

Logs (if relevant)

Logs

DEBUG: Fetching gitlab.companyname/my_group/my_other_repo via GONOPROXY match (repository=my_group/my_repo)
DEBUG: GET https://gitlab.companyname/my_group/my_other_repo?go-get=1 = (code=ECONNREFUSED, statusCode=-1 retryCount=2, duration=2) (repository=my_group/my_repo)
DEBUG: Datasource connection error (repository=my_group/my_repo)
       "datasource": "go",
       "packageName": "gitlab.companyname/my_group/my_other_repo",
       "url": undefined,
       "errCode": "ECONNREFUSED"
DEBUG: Failed to look up go package gitlab.companyname/my_group/my_other_repo (repository=my_group/my_repo, packageFile=go.mod, dependency=gitlab.companyname/my_group/my_other_repo)

[rarkins]

See if https://docs.renovatebot.com/configuration-options/#insecureregistry works for this case

[rarkins]

Can you set up a goproxy for Renovate to use, so that it can hide the complexity from Renovate?

[rarkins]

BTW if you set GOINSECURE env then maybe Renovate could look for that and prepend http instead of https?

[fogrye]

BTW if you set GOINSECURE env then maybe Renovate could look for that and prepend http instead of https?

It would be the best solution for this issue. I'm not sure that GOPROXY can have authorisation and exposure of private packages is definitely not what we want.

[rarkins]

If you'd like to submit a PR adding support for GOINSECURE in Renovate's go datasource lookups then please go ahead.

[fogrye]

If you'd like to submit a PR adding support for GOINSECURE in Renovate's go datasource lookups then please go ahead.

Could you pls convert it to issue, I will reference it in PR

[rarkins]

#28513