services.gitlab = {
    enable = true;
    secrets = {
      secret = "redacted";
      otp = "redacted";
      db = "redacted";
    };
    databasePassword = "redacted";
    host = "git.xxx.yyy";
    port = 8080;
    https = true;
  };