gitlab при клонирование по https возвращет 403
в логах вот такое
Started GET "/ci-template/ci-template.git/info/refs?service=git-upload-pack" for *.*.*.246 at 2020-01-27 19:05:55 +0000
Processing by Projects::GitHttpController#info_refs as */*
Parameters: {"service"=>"git-upload-pack", "namespace_id"=>"ci-template", "project_id"=>"ci-template.git"}
Completed 403 Forbidden in 435ms (Views: 0.4ms | ActiveRecord: 13.0ms | Elasticsearch: 0.0ms)
куда копать?