services.gitlab.secrets.activeRecordDeterministicKeyFile

NixOS option

A file containing the secret used to encrypt some rails data in a deterministic way in the DB. This should not be the same as services.gitlab.secrets.activeRecordPrimaryKeyFile! Make sure the secret is at ideally 32 characters and all random, no regular words or you’ll be exposed to dictionary attacks. This should be a string, not a nix path, since nix paths are copied into the world-readable nix store.

type: null or absolute path
Default
null
declared in: nixos/modules/services/misc/gitlab.nixView source on NixOS/nixpkgs →