anchor.diff:        after = [ "network.target" "gitlab.service" ];
         wantedBy = [ "multi-user.target" ];
         environment.HOME = gitlabEnv.HOME;
  -      environment.GEM_HOME = "${cfg.packages.gitaly.rubyEnv}/${ruby.gemPath}";
         environment.GITLAB_SHELL_CONFIG_PATH = gitlabEnv.GITLAB_SHELL_CONFIG_PATH;
  -      path = with pkgs; [ gitAndTools.git cfg.packages.gitaly.rubyEnv ruby ];
  +      path = with pkgs; [ gitAndTools.git cfg.packages.gitaly.rubyEnv cfg.packages.gitaly.rubyEnv.wrappedRuby ];
         serviceConfig = {
  -        #PermissionsStartOnly = true; # preStart must be run as root
           Type = "simple";
           User = cfg.user;
           Group = cfg.group;
  
positive.code:         Type = "simple";
          User = cfg.user;
          Group = cfg.group;
          TimeoutSec = "300";
          Restart = "on-failure";
          WorkingDirectory = gitlabEnv.HOME;
          ExecStart =
  
negative.code:   cfg = config.services.gitlab;
  
    ruby = cfg.packages.gitlab.ruby;
  
    gitlabSocket = "${cfg.statePath}/tmp/sockets/gitlab.socket";
    gitalySocket = "${cfg.statePath}/tmp/sockets/gitaly.socket";
  