anchor.diff:          in "+${pkgs.writeShellScript "gitlab-pre-start-full-privileges" preStartFullPrivileges}";
   
           ExecStart = pkgs.writeShellScript "gitlab-config" ''
  -          set -eu
  +          set -o errexit -o pipefail -o nounset
  +          shopt -s inherit_errexit
   
             umask u=rwx,g=rx,o=
   
  
positive.code:         RemainAfterExit = true;
  
          ExecStart = pkgs.writeShellScript "gitlab-db-config" ''
            set -eu
            umask u=rwx,g=rx,o=
  
            initial_root_password="$(<'${cfg.initialRootPasswordFile}')"
  
negative.code:             rm -f '${cfg.statePath}/config/database.yml'
  
              ${if cfg.databasePasswordFile != null then ''
                  db_password="$(<'${cfg.databasePasswordFile}')"
                  export db_password
  
                  if [[ -z "$db_password" ]]; then
                    >&2 echo "Database password was an empty string!"
  