anchor.diff:  
       # Create database passwordFile default when password is configured.
       services.gitea.database.passwordFile =
  -      (mkDefault (toString (pkgs.writeTextFile {
  +      mkDefault (toString (pkgs.writeTextFile {
           name = "gitea-database-password";
           text = cfg.database.password;
  -      })));
  +      }));
   
       systemd.services.gitea-dump = mkIf cfg.dump.enable {
          description = "gitea dump";
  
positive.code:         replaceSecretBin = "${pkgs.replace-secret}/bin/replace-secret";
        in ''
          # copy custom configuration and generate a random secret key if needed
          ${optionalString (cfg.useWizard == false) ''
            function gitea_setup {
              cp -f ${configFile} ${runConfig}
  
  
negative.code: 
          port = mkOption {
            type = types.port;
            default = if !usePostgresql then 3306 else pg.port;
            defaultText = literalExpression ''
              if config.${opt.database.type} != "postgresql"
              then 3306
  