anchor.diff:        (optional (
           any (x: x.password != null || x.basicAuthPassword != null || x.secureJsonData != null) cfg.provision.datasources
         ) "Datasource passwords will be stored as plaintext in the Nix store!")
  +      (optional (
  +        any (x: x.secure_settings != null) cfg.provision.notifiers
  +      ) "Notifier secure settings will be stored as plaintext in the Nix store!")
       ];
   
       environment.systemPackages = [ cfg.package ];
  
positive.code:           type = types.path;
            description = "Path grafana will watch for dashboards";
          };
        };
      };
    };
  
negative.code: 
    dashboardFile = pkgs.writeText "dashboard.yaml" (builtins.toJSON dashboardConfiguration);
  
    notifierConfiguration = {
      apiVersion = 1;
      notifiers = cfg.provision.notifiers;
    };
  
    notifierFile = pkgs.writeText "notifier.yaml" (builtins.toJSON notifierConfiguration);
  
    provisionConfDir =  pkgs.runCommand "grafana-provisioning" { } ''
      mkdir -p $out/{datasources,dashboards}
      ln -sf ${datasourceFile} $out/datasources/datasource.yaml
      ln -sf ${dashboardFile} $out/dashboards/dashboard.yaml
      ln -sf ${notifierFile} $out/notifiers/notifier.yaml
    '';
  
    # Get a submodule without any embedded metadata:
  