if we outsource this into `gitlab::requirements`, shouldn't we rename the Service to `proxy`?