anchor.diff:        after = [ "network.target" "gitlab.service" ];
         wantedBy = [ "multi-user.target" ];
         environment.HOME = gitlabEnv.HOME;
  +      environment.GEM_HOME = "${cfg.packages.gitaly.rubyEnv}/${ruby.gemPath}";
  +      environment.GITLAB_SHELL_CONFIG_PATH = gitlabEnv.GITLAB_SHELL_CONFIG_PATH;
         path = with pkgs; [ gitAndTools.git cfg.packages.gitaly.rubyEnv ruby ];
         serviceConfig = {
           #PermissionsStartOnly = true; # preStart must be run as root
  
positive.code:       };
        git = {
          bin_path = "git";
          max_size = 20971520; # 20MB
          timeout = 10;
        };
        monitoring = {
          ip_whitelist = [ "127.0.0.0/8" "::1/128" ];
  
negative.code:       ldap.enabled = false;
        omniauth.enabled = false;
        shared.path = "${cfg.statePath}/shared";
        gitaly.client_path = "${cfg.packages.gitaly}/bin";
        backup.path = "${cfg.backupPath}";
        gitlab_shell = {
          path = "${cfg.packages.gitlab-shell}";
  