diff --git a/backend/src/services/secret-sync/gitlab/gitlab-sync-fns.ts b/backend/src/services/secret-sync/gitlab/gitlab-sync-fns.ts
index 0642f368b..571f51aaf 100644
--- a/backend/src/services/secret-sync/gitlab/gitlab-sync-fns.ts
+++ b/backend/src/services/secret-sync/gitlab/gitlab-sync-fns.ts
@@ -156,7 +156,7 @@ const createGitLabVariable = async ({
         protected: payload.protected,
         masked: payload.masked,
         // @ts-expect-error type
-        masked_and_hidden: payload.masked_and_hidden,
+        ...(payload.masked_and_hidden && { masked_and_hidden: payload.masked_and_hidden }),
         raw: false
       });
     }
diff --git a/docs/integrations/app-connections/gitlab.mdx b/docs/integrations/app-connections/gitlab.mdx
index 308dae703..b81c0fbcd 100644
--- a/docs/integrations/app-connections/gitlab.mdx
+++ b/docs/integrations/app-connections/gitlab.mdx
@@ -44,8 +44,8 @@ Infisical supports two methods for connecting to GitLab: **OAuth** and **Access
 
           Back in your Infisical instance, add two new environment variables for the credentials of your GitLab OAuth application:
 
-          - `CLIENT_ID_GITLAB`: The **Application ID** of your GitLab OAuth application.
-          - `CLIENT_SECRET_GITLAB`: The **Secret** of your GitLab OAuth application.
+          - `INF_APP_CONNECTION_GITLAB_OAUTH_CLIENT_ID`: The **Application ID** of your GitLab OAuth application.
+          - `INF_APP_CONNECTION_GITLAB_OAUTH_CLIENT_SECRET`: The **Secret** of your GitLab OAuth application.
 
           Once added, restart your Infisical instance and use the GitLab Connection.
         </Step>