anchor.diff:  
           ExecStartPre = let
             preStartFullPrivileges = ''
  -            shopt -s dotglob nullglob
  -            set -eu
  +            set -o errexit -o pipefail -o nounset
  +            shopt -s dotglob nullglob inherit_errexit
   
               chown --no-dereference '${cfg.user}':'${cfg.group}' '${cfg.statePath}'/*
               if [[ -n "$(ls -A '${cfg.statePath}'/config/)" ]]; then
  
positive.code:         in "+${pkgs.writeShellScript "gitlab-pre-start-full-privileges" preStartFullPrivileges}";
  
          ExecStart = pkgs.writeShellScript "gitlab-config" ''
            set -eu
  
            umask u=rwx,g=rx,o=
  
  
negative.code:         RemainAfterExit = true;
  
          ExecStart = pkgs.writeShellScript "gitlab-db-config" ''
            set -o errexit -o pipefail -o nounset
            shopt -s inherit_errexit
            umask u=rwx,g=rx,o=
  
            initial_root_password="$(<'${cfg.initialRootPasswordFile}')"
  