services.gitlab.secrets.activeRecordDeterministicKeyFile

A file containing the secret used to encrypt some rails data in a deterministic way in the DB. This should not be the same as services.gitlab.secrets.activeRecordPrimaryKeyFile!

Make sure the secret is at ideally 32 characters and all random, no regular words or you'll be exposed to dictionary attacks.

This should be a string, not a nix path, since nix paths are copied into the world-readable nix store.

Type

null or absolute path

Default

null

Declared

<nixpkgs/nixos/modules/services/misc/gitlab.nix>