anchor.diff:        "d ${cfg.statePath} 0750 ${cfg.user} ${cfg.group} -"
         "d ${cfg.statePath}/builds 0750 ${cfg.user} ${cfg.group} -"
         "d ${cfg.statePath}/config 0750 ${cfg.user} ${cfg.group} -"
  -      "d ${cfg.statePath}/config/initializers 0750 ${cfg.user} ${cfg.group} -"
         "d ${cfg.statePath}/db 0750 ${cfg.user} ${cfg.group} -"
         "d ${cfg.statePath}/log 0750 ${cfg.user} ${cfg.group} -"
         "d ${cfg.statePath}/repositories 2770 ${cfg.user} ${cfg.group} -"
  
positive.code:           preStart = ''
              set -eu
  
              cp -f ${cfg.packages.gitlab}/share/gitlab/VERSION ${cfg.statePath}/VERSION
              rm -rf ${cfg.statePath}/db/*
              rm -rf ${cfg.statePath}/config/initializers/*
              rm -f ${cfg.statePath}/lib
              cp -rf --no-preserve=mode ${cfg.packages.gitlab}/share/gitlab/config.dist/* ${cfg.statePath}/config
              cp -rf --no-preserve=mode ${cfg.packages.gitlab}/share/gitlab/db/* ${cfg.statePath}/db
              ln -sf ${extraGitlabRb} ${cfg.statePath}/config/initializers/extra-gitlab.rb
  
negative.code:                   "${cfg.statePath}/config/gitlab.yml"
                }
  
                rm -f '${cfg.statePath}/config/secrets.yml'
  
                export secret="$(<'${cfg.secrets.secretFile}')"
                export db="$(<'${cfg.secrets.dbFile}')"
  