anchor.diff:        redmine.gid = config.ids.gids.redmine;
       };
   
  -    warnings = optional (cfg.database.password != "")
  -      ''config.services.redmine.database.password will be stored as plaintext
  -      in the Nix store. Use database.passwordFile instead.'';
  -
  -    # Create database passwordFile default when password is configured.
  -    services.redmine.database.passwordFile =
  -      (mkDefault (toString (pkgs.writeTextFile {
  -        name = "redmine-database-password";
  -        text = cfg.database.password;
  -      })));
  -
     };
   
   }
  
positive.code: 
  
          # handle database.passwordFile & permissions
          DBPASS=$(head -n1 ${cfg.database.passwordFile})
          cp -f ${databaseYml} "${cfg.stateDir}/config/database.yml"
          sed -e "s,#dbpass#,$DBPASS,g" -i "${cfg.stateDir}/config/database.yml"
          chmod 440 "${cfg.stateDir}/config/database.yml"
  
negative.code: {
    imports = [
      (mkRemovedOptionModule [ "services" "redmine" "extraConfig" ] "Use services.redmine.settings instead.")
      (mkRemovedOptionModule [ "services" "redmine" "database" "password" ] "Use services.redmine.database.passwordFile instead.")
    ];
  
    # interface
  