GitLab assets redirect to sign in

Now I’m not sure what I’m doing wrong, but once I enabled GitLab as a service going to any page redirects to the sign in page, even CSS/JS/image assets.

This is my config section related to GitLab:

        services.gitlab = {
                enable = true;
 
                databaseHost = "***";
                databasePasswordFile = "/etc/gitlab/db.password";
 
                host = "***";
                port = 443;
                https = true;
 
                initialRootEmail = "***";
                initialRootPasswordFile = "/etc/gitlab/root.password";
 
                secrets = {
                        dbFile = "/etc/gitlab/db.secret";
                        jwsFile = "/etc/gitlab/jws.pem";
                        otpFile = "/etc/gitlab/otp.secret";
                        secretFile = "/etc/gitlab/secret";
                };
 
                smtp = {
                        enable = true;
 
                        domain = "***";
                        username = "***";
                        passwordFile = "/etc/gitlab/smtp.password";
                        authentication = "cram_md5";
                        port = 465;
                };
        };

        services.nginx = {
                enable = true;
                enableReload = true;
                package = pkgs.nginxMainline;
 
                recommendedOptimisation = true;
                recommendedGzipSettings = true;
                recommendedProxySettings = true;
 
                virtualHosts."***" = {
                        locations."/" = {
                                proxyPass = "http://unix:/var/run/gitlab/gitlab.socket:/";
                                proxyWebsockets = true;
                        };
                };
        };

Some logs:

Jun 03 15:46:19 gitlab unicorn[25361]: I, [2020-06-03T15:46:19.713422 #25361]  INFO -- : Started GET "/assets/webpack/pages.sessions.new.47aa745c.chunk.js" for 10.1.1.1 at 2020-06-03 15:46:19 +0000
Jun 03 15:46:19 gitlab unicorn[25365]: I, [2020-06-03T15:46:19.713897 #25365]  INFO -- : Started GET "/assets/print-74c3df10dad473d66660c828e3aa54ca3bfeac6d8bb708643331403fe7211e60.css" for 10.1.1.1 at 2020-06-03 15:46:19 +0000
Jun 03 15:46:19 gitlab unicorn[25361]: I, [2020-06-03T15:46:19.716291 #25361]  INFO -- : Processing by ApplicationController#route_not_found as JS
Jun 03 15:46:19 gitlab unicorn[25361]: I, [2020-06-03T15:46:19.716318 #25361]  INFO -- :   Parameters: {"unmatched_route"=>"assets/webpack/pages.sessions.new.47aa745c.chunk"}
Jun 03 15:46:19 gitlab unicorn[25365]: I, [2020-06-03T15:46:19.718243 #25365]  INFO -- : Processing by ApplicationController#route_not_found as CSS
Jun 03 15:46:19 gitlab unicorn[25365]: I, [2020-06-03T15:46:19.718316 #25365]  INFO -- :   Parameters: {"unmatched_route"=>"assets/print-74c3df10dad473d66660c828e3aa54ca3bfeac6d8bb708643331403fe7211e60"}
Jun 03 15:46:19 gitlab unicorn[25361]: I, [2020-06-03T15:46:19.718433 #25361]  INFO -- : Redirected to https://***/users/sign_in
Jun 03 15:46:19 gitlab unicorn[25361]: I, [2020-06-03T15:46:19.718669 #25361]  INFO -- : Completed 302 Found in 2ms (ActiveRecord: 0.0ms | Elasticsearch: 0.0ms | Allocations: 1681)
Jun 03 15:46:19 gitlab unicorn[25365]: I, [2020-06-03T15:46:19.721262 #25365]  INFO -- : Redirected to https://***/users/sign_in
Jun 03 15:46:19 gitlab unicorn[25365]: I, [2020-06-03T15:46:19.721646 #25365]  INFO -- : Completed 302 Found in 3ms (ActiveRecord: 0.0ms | Elasticsearch: 0.0ms | Allocations: 1669)

Am I doing anything glaringly wrong?

Turns out I’m a dumbo and the right socket is gitlab-workhorse.socket, which is the actual frontend, guess gitlab.socket is just the backend.