gitlab: fix homedir
shorewall: use systemd to restart