anchor.diff:            '';
           };
   
  -        systemd.services.keycloakMySQLInit = lib.mkIf createLocalMySQL {
  +        systemd.services.keycloakMySQLInit = mkIf createLocalMySQL {
             after = [ "mysql.service" ];
             before = [ "keycloak.service" ];
             bindsTo = [ "mysql.service" ];
  
positive.code:                         ${jbossPath}:remove()
                      end-if
                    '';
              in text + lib.concatMapStringsSep "\n" (name: recurse (nodePath ++ [name]) children.${name}) orderedSubPaths;
          in
            recurse [] attrs;
  
  
negative.code:             serviceConfig = {
                LoadCredential = [
                  "db_password:${cfg.database.passwordFile}"
                ] ++ optionals (cfg.sslCertificate != null && cfg.sslCertificateKey != null) [
                  "ssl_cert:${cfg.sslCertificate}"
                  "ssl_key:${cfg.sslCertificateKey}"
                ];
  