services.gitlab.secrets.activeRecordDeterministicKeyFile
NixOS option
A file containing the secret used to encrypt some rails data in a deterministic way in the DB. This should not be the same as services.gitlab.secrets.activeRecordPrimaryKeyFile! Make sure the secret is at ideally 32 characters and all random, no regular words or you’ll be exposed to dictionary attacks. This should be a string, not a nix path, since nix paths are copied into the world-readable nix store.
type: null or absolute pathDefault
declared in: nixos/modules/services/misc/gitlab.nixView source on NixOS/nixpkgs →null