anchor.diff:            if [ ! -f "${seafRoot}/server-setup" ]; then
                 mkdir -p ${dataDir}/library-template
                 mkdir -p ${ccnetDir}/{GroupMgr,misc,OrgMgr,PeerMgr}
  -              ${pkgs.sqlite}/bin/sqlite3 ${ccnetDir}/GroupMgr/groupmgr.db ".read ${cfg.seafilePackage}/share/seafile/sql/sqlite/groupmgr.sql"
  -              ${pkgs.sqlite}/bin/sqlite3 ${ccnetDir}/misc/config.db ".read ${cfg.seafilePackage}/share/seafile/sql/sqlite/config.sql"
  -              ${pkgs.sqlite}/bin/sqlite3 ${ccnetDir}/OrgMgr/orgmgr.db ".read ${cfg.seafilePackage}/share/seafile/sql/sqlite/org.sql"
  -              ${pkgs.sqlite}/bin/sqlite3 ${ccnetDir}/PeerMgr/usermgr.db ".read ${cfg.seafilePackage}/share/seafile/sql/sqlite/user.sql"
  -              ${pkgs.sqlite}/bin/sqlite3 ${dataDir}/seafile.db ".read ${cfg.seafilePackage}/share/seafile/sql/sqlite/seafile.sql"
  +              sqlite3 ${ccnetDir}/GroupMgr/groupmgr.db ".read ${cfg.seafilePackage}/share/seafile/sql/sqlite/groupmgr.sql"
  +              sqlite3 ${ccnetDir}/misc/config.db ".read ${cfg.seafilePackage}/share/seafile/sql/sqlite/config.sql"
  +              sqlite3 ${ccnetDir}/OrgMgr/orgmgr.db ".read ${cfg.seafilePackage}/share/seafile/sql/sqlite/org.sql"
  +              sqlite3 ${ccnetDir}/PeerMgr/usermgr.db ".read ${cfg.seafilePackage}/share/seafile/sql/sqlite/user.sql"
  +              sqlite3 ${dataDir}/seafile.db ".read ${cfg.seafilePackage}/share/seafile/sql/sqlite/seafile.sql"
                 echo "${cfg.seafilePackage.version}-sqlite" > "${seafRoot}"/server-setup
             fi
             # checking for upgrades and handling them
  
positive.code:     }
      MEDIA_ROOT = '${seahubDir}/media/'
      THUMBNAIL_ROOT = '${seahubDir}/thumbnail/'
  
      with open('${seafRoot}/.seahubSecret') as f:
          SECRET_KEY = f.readline().rstrip()
  
negative.code:         after = [ "network.target" ];
          wantedBy = [ "seafile.target" ];
          restartTriggers = [ ccnetConf seafileConf ];
          path = [ pkgs.sqlite ];
          serviceConfig = securityOptions // {
            User = "seafile";
            Group = "seafile";
  