anchor.diff:              WorkingDirectory = "/var/lib/plausible";
               StateDirectory = "plausible";
               ExecStartPre = "@${pkgs.writeShellScript "plausible-setup" ''
  +              set -eu -o pipefail
                 ${envSecrets}
                 ${pkgs.plausible}/createdb.sh
                 ${pkgs.plausible}/migrate.sh
  
positive.code:               ''}
              ''} plausible-setup";
              ExecStart = "@${pkgs.writeShellScript "plausible" ''
                ${envSecrets}
                plausible start
              ''} plausible";
  
negative.code: 
    # FIXME consider using LoadCredential as soon as it actually works.
    envSecrets = ''
      ADMIN_USER_PWD="$(<${cfg.adminUser.passwordFile})"
      export ADMIN_USER_PWD # separate export to make `set -e` work
  
      SECRET_KEY_BASE="$(<${cfg.server.secretKeybaseFile})"
      export SECRET_KEY_BASE # separate export to make `set -e` work
  
      ${optionalString (cfg.mail.smtp.passwordFile != null) ''
        SMTP_USER_PWD="$(<${cfg.mail.smtp.passwordFile})"
        export SMTP_USER_PWD # separate export to make `set -e` work
      ''}
    '';
  in {
  