anchor.diff:      services.rabbitmq = {
         enable = true;
         managementPlugin.enable = true;
  +
  +      # To encrypt:
  +      # rabbitmqctl --quiet encode --cipher blowfish_cfb64 --hash sha256 \
  +      #   --iterations 10000 '<<"dJT8isYu6t0Xb6u56rPglSj1vK51SlNVlXfwsRxw">>' \
  +      #   "hOjWzSEn2Z7cHzKOcf6i183O2NdjurSuoMDIIv01" ;
  +      config = ''
  +        [ { rabbit
  +          , [ {default_user, <<"alice">>}
  +            , { default_pass
  +              , {encrypted,<<"oKKxyTze9PYmsEfl6FG1MxIUhxY7WPQL7HBoMPRC/1ZOdOZbtr9+DxjWW3e1D5SL48n3D9QOsGD0cOgYG7Qdvb7Txrepw8w=">>}
  +              }
  +            , {config_entry_decoder
  +              , [ {passphrase, {file, <<"${configKeyPath}">>}}
  +                , {cipher, blowfish_cfb64}
  +                , {hash, sha256}
  +                , {iterations, 10000}
  +                ]
  +              }
  +            % , {rabbitmq_management, [{path_prefix, "/_queues"}]}
  +            ]
  +          }
  +        ].
  +      '';
       };
       # Ensure there is sufficient extra disk space for rabbitmq to be happy
       virtualisation.diskSize = 1024;
  
positive.code: # This test runs rabbitmq and checks if rabbitmq is up and running.
  
  import ./make-test-python.nix ({ pkgs, ... }: {
    name = "rabbitmq";
    meta = with pkgs.lib.maintainers; {
      maintainers = [ eelco offline ];
  
negative.code:         'su -s ${pkgs.runtimeShell} rabbitmq -c "rabbitmqctl status"'
      )
      machine.wait_for_open_port(15672)
  
      # The password is the plaintext that was encrypted with rabbitmqctl encode above.
      machine.wait_until_succeeds(
          '${pkgs.rabbitmq-java-client}/bin/PerfTest --time 10 --uri amqp://alice:dJT8isYu6t0Xb6u56rPglSj1vK51SlNVlXfwsRxw@localhost'
      )
    '';
  })
  