anchor.diff:  
       };
   
  +    systemd.services.gitlab-backup = {
  +      after = [ "gitlab.service" ];
  +      bindsTo = [ "gitlab.service" ];
  +      startAt = cfg.backup.startAt;
  +      environment = {
  +        RAILS_ENV = "production";
  +        CRON = "1";
  +      } // optionalAttrs (stringLength cfg.backup.skip > 0) {
  +        SKIP = cfg.backup.skip;
  +      };
  +      serviceConfig = {
  +        User = cfg.user;
  +        Group = cfg.group;
  +        ExecStart = "${gitlab-rake}/bin/gitlab-rake gitlab:backup:create";
  +      };
  +    };
  +
     };
   
     meta.doc = ./gitlab.xml;
  
positive.code:       omniauth.enabled = false;
        shared.path = "${cfg.statePath}/shared";
        gitaly.client_path = "${cfg.packages.gitaly}/bin";
        backup.path = "${cfg.backupPath}";
        gitlab_shell = {
          path = "${cfg.packages.gitlab-shell}";
          hooks_path = "${cfg.statePath}/shell/hooks";
  
negative.code:       "d /run/gitlab 0755 ${cfg.user} ${cfg.group} -"
        "d ${gitlabEnv.HOME} 0750 ${cfg.user} ${cfg.group} -"
        "z ${gitlabEnv.HOME}/.ssh/authorized_keys 0600 ${cfg.user} ${cfg.group} -"
        "d ${cfg.backup.path} 0750 ${cfg.user} ${cfg.group} -"
        "d ${cfg.statePath} 0750 ${cfg.user} ${cfg.group} -"
        "d ${cfg.statePath}/builds 0750 ${cfg.user} ${cfg.group} -"
        "d ${cfg.statePath}/config 0750 ${cfg.user} ${cfg.group} -"
  