anchor.diff:  
   
           # handle database.passwordFile & permissions
  -        DBPASS=$(head -n1 ${cfg.database.passwordFile})
  +        DBPASS=${optionalString (cfg.database.passwordFile != null) "$(head -n1 ${cfg.database.passwordFile})"}
           cp -f ${databaseYml} "${cfg.stateDir}/config/database.yml"
           sed -e "s,#dbpass#,$DBPASS,g" -i "${cfg.stateDir}/config/database.yml"
           chmod 440 "${cfg.stateDir}/config/database.yml"
  
positive.code: {
    imports = [
      (mkRemovedOptionModule [ "services" "redmine" "extraConfig" ] "Use services.redmine.settings instead.")
    ];
  
    # interface
  
negative.code:           description = "Database user.";
          };
  
          passwordFile = mkOption {
            type = types.nullOr types.path;
            default = null;
  