anchor.diff:  
           ${pkgs.openssl}/bin/openssl rand -hex 32 > ${cfg.statePath}/config/gitlab_shell_secret
   
  -        # The uploads directory is hardcoded somewhere deep in rails. It is
  -        # symlinked in the gitlab package to /run/gitlab/uploads to make it
  -        # configurable
           mkdir -p /run/gitlab
  -        mkdir -p ${cfg.statePath}/{log,uploads}
  +        mkdir -p ${cfg.statePath}/log
           ln -sf ${cfg.statePath}/log /run/gitlab/log
  -        ln -sf ${cfg.statePath}/uploads /run/gitlab/uploads
           ln -sf ${cfg.statePath}/tmp /run/gitlab/tmp
           ln -sf $GITLAB_SHELL_CONFIG_PATH /run/gitlab/shell-config.yml
           chown -R ${cfg.user}:${cfg.group} /run/gitlab
  
positive.code:         };
        };
        extra = {};
      };
    };
  
  
negative.code:         chmod -R ug+rwX,o-rwx ${cfg.statePath}/repositories
          chmod -R ug-s ${cfg.statePath}/repositories
          find ${cfg.statePath}/repositories -type d -print0 | xargs -0 chmod g+s
        '';
  
        serviceConfig = {
  