···

       
108
       
108
       
 
       
      ldap.enabled = false;

     

       
109
       
109
       
 
       
      omniauth.enabled = false;

     

       
110
       
110
       
 
       
      shared.path = "${cfg.statePath}/shared";

     

       
111
       
111
       
+
       
      gitaly.client_path = "${cfg.packages.gitaly}/bin";

     

       
111
       
112
       
 
       
      backup.path = "${cfg.backupPath}";

     

       
112
       
113
       
 
       
      gitlab_shell = {

     

       
113
       
114
       
 
       
        path = "${cfg.packages.gitlab-shell}";

     
···

       
121
       
122
       
 
       
      };

     

       
122
       
123
       
 
       
      git = {

     

       
123
       
124
       
 
       
        bin_path = "git";

     

       
124
       
124
       
-
       
        max_size = 20971520; # 20MB

     

       
125
       
125
       
-
       
        timeout = 10;

     

       
126
       
125
       
 
       
      };

     

       
127
       
126
       
 
       
      monitoring = {

     

       
128
       
127
       
 
       
        ip_whitelist = [ "127.0.0.0/8" "::1/128" ];

     
···

       
493
       
492
       
 
       
      after = [ "network.target" "gitlab.service" ];

     

       
494
       
493
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
495
       
494
       
 
       
      environment.HOME = gitlabEnv.HOME;

     

       
495
       
495
       
+
       
      environment.GEM_HOME = "${cfg.packages.gitaly.rubyEnv}/${ruby.gemPath}";

     

       
496
       
496
       
+
       
      environment.GITLAB_SHELL_CONFIG_PATH = gitlabEnv.GITLAB_SHELL_CONFIG_PATH;

     

       
496
       
497
       
 
       
      path = with pkgs; [ gitAndTools.git cfg.packages.gitaly.rubyEnv ruby ];

     

       
497
       
498
       
 
       
      serviceConfig = {

     

       
498
       
499
       
 
       
        #PermissionsStartOnly = true; # preStart must be run as root