anchor.diff:  
           # Install the shell required to push repositories
           ln -fs ${pkgs.writeText "config.yml" gitlabShellYml} "$GITLAB_SHELL_CONFIG_PATH"
  -        ln -fs ${pkgs.gitlab-shell}/hooks "$GITLAB_SHELL_HOOKS_PATH"
  -        ${pkgs.gitlab-shell}/bin/install
  +        ln -fs ${cfg.packages.gitlab-shell}/hooks "$GITLAB_SHELL_HOOKS_PATH"
  +        ${cfg.packages.gitlab-shell}/bin/install
   
           if [ "${cfg.databaseHost}" = "127.0.0.1" ]; then
             if ! test -e "${cfg.statePath}/db-created"; then
  
positive.code:         chown -R ${cfg.user}:${cfg.group} ${gitlabEnv.HOME}/
          chmod -R u+rwX,go-rwx+X ${gitlabEnv.HOME}/
  
          cp -rf ${pkgs.gitlab}/share/gitlab/config.dist/* ${cfg.statePath}/config
          ln -sf ${cfg.statePath}/config /run/gitlab/config
          cp ${pkgs.gitlab}/share/gitlab/VERSION ${cfg.statePath}/VERSION
  
          # JSON is a subset of YAML
          ln -fs ${pkgs.writeText "gitlab.yml" (builtins.toJSON gitlabConfig)} ${cfg.statePath}/config/gitlab.yml
  
negative.code: 
    config = mkIf cfg.enable {
  
      environment.systemPackages = [ pkgs.git gitlab-runner cfg.packages.gitlab-shell ];
  
      assertions = [
        { assertion = cfg.databasePassword != "";
  