{ pkgs, ... }:
{
  services.gitlab = {
    enable = true;
    port = 80;
    databasePasswordFile = pkgs.writeText "dbPassword" "test123";
    initialRootPasswordFile = pkgs.writeText "rootPassword" "test123";
    secrets = rec {
      secretFile = pkgs.writeText "secret" "Aig5zaic";
      otpFile = pkgs.writeText "otpsecret" "Riew9mue";
      dbFile = pkgs.writeText "dbsecret" "we2quaeZ";
      jwsFile = pkgs.runCommand "oidcKeyBase" { } "${pkgs.openssl}/bin/openssl genrsa 2048 > $out";
    };
  };
}