anchor.diff:      gitlab_url = "http+unix://${pathUrlQuote gitlabSocket}";
       http_settings.self_signed_cert = false;
       repos_path = "${cfg.statePath}/repositories";
  -    secret_file = "${cfg.statePath}/config/gitlab_shell_secret";
  +    secret_file = "${cfg.statePath}/gitlab_shell_secret";
       log_file = "${cfg.statePath}/log/gitlab-shell.log";
       custom_hooks_dir = "${cfg.statePath}/custom_hooks";
       redis = {
  
positive.code:         ${pkgs.sudo}/bin/sudo -u ${cfg.user} cp -rf ${cfg.packages.gitlab}/share/gitlab/db/* ${cfg.statePath}/db
          ${pkgs.sudo}/bin/sudo -u ${cfg.user} chmod u+w ${cfg.statePath}/db/*
  
          ${pkgs.openssl}/bin/openssl rand -hex 32 > ${cfg.statePath}/config/gitlab_shell_secret
  
          ${pkgs.sudo}/bin/sudo -u ${cfg.user} ${cfg.packages.gitlab-shell}/bin/install
  
  
negative.code:       gitlab_shell = {
          path = "${cfg.packages.gitlab-shell}";
          hooks_path = "${cfg.statePath}/shell/hooks";
          secret_file = "${cfg.statePath}/gitlab_shell_secret";
          upload_pack = true;
          receive_pack = true;
        };
  