anchor.diff:            preStart = ''
               set -eu
   
  +            umask u=rwx,g=rx,o=
  +
               cp -f ${cfg.packages.gitlab}/share/gitlab/VERSION ${cfg.statePath}/VERSION
               rm -rf ${cfg.statePath}/db/*
  -            rm -rf ${cfg.statePath}/config/initializers/*
               rm -f ${cfg.statePath}/lib
  +            find '${cfg.statePath}/config/' -maxdepth 1 -mindepth 1 -type d -execdir rm -rf {} \;
               cp -rf --no-preserve=mode ${cfg.packages.gitlab}/share/gitlab/config.dist/* ${cfg.statePath}/config
               cp -rf --no-preserve=mode ${cfg.packages.gitlab}/share/gitlab/db/* ${cfg.statePath}/db
               ln -sf ${extraGitlabRb} ${cfg.statePath}/config/initializers/extra-gitlab.rb
  
positive.code:                   "${cfg.statePath}/config/gitlab.yml"
                }
  
                if [[ -h '${cfg.statePath}/config/secrets.yml' ]]; then
                  rm '${cfg.statePath}/config/secrets.yml'
                fi
  
                export secret="$(<'${cfg.secrets.secretFile}')"
                export db="$(<'${cfg.secrets.dbFile}')"
  
negative.code:       "d ${cfg.statePath} 0750 ${cfg.user} ${cfg.group} -"
        "d ${cfg.statePath}/builds 0750 ${cfg.user} ${cfg.group} -"
        "d ${cfg.statePath}/config 0750 ${cfg.user} ${cfg.group} -"
        "d ${cfg.statePath}/db 0750 ${cfg.user} ${cfg.group} -"
        "d ${cfg.statePath}/log 0750 ${cfg.user} ${cfg.group} -"
        "d ${cfg.statePath}/repositories 2770 ${cfg.user} ${cfg.group} -"
  