anchor.diff:    ###### implementation
   
     config = mkIf cfg.enable {
  +
  +    assertions = [
  +      {
  +        assertion = cfg.database.password != null -> cfg.database.passwordFile == null;
  +        message = "Cannot set both password and passwordFile";
  +      }
  +    ];
   
       services.phpfpm.poolConfigs = mkIf (cfg.pool == "${poolName}") {
         "${poolName}" = ''
  
positive.code:         };
  
          password = mkOption {
            type = types.nullOr types.str;
            default = null;
            description = ''
  
negative.code:       define('DB_HOST', '${optionalString (cfg.database.host != null) cfg.database.host}');
        define('DB_USER', '${cfg.database.user}');
        define('DB_NAME', '${cfg.database.name}');
        define('DB_PASS', ${
          if (cfg.database.password != null) then
            "'${(escape ["'" "\\"] cfg.database.password)}'"
          else if (cfg.database.passwordFile != null) then
            "file_get_contents('${cfg.database.passwordFile}')"
          else
            ""
        });
        define('DB_PORT', '${toString dbPort}');
  
        define('AUTH_AUTO_CREATE', ${boolToString cfg.auth.autoCreate});
  