anchor.diff:        environment = {
           QT_QPA_PLATFORM = "offscreen";
         } // mapAttrs' (n: v: nameValuePair "GF_${n}" (toString v)) envOptions;
  +      script = ''
  +        ${optionalString (cfg.database.passwordFile != null) ''
  +          export GF_DATABASE_PASSWORD="$(cat ${escapeShellArg cfg.database.passwordFile})"
  +        ''}
  +        ${optionalString (cfg.security.adminPasswordFile != null) ''
  +          export GF_SECURITY_ADMIN_PASSWORD="$(cat ${escapeShellArg cfg.security.adminPasswordFile})"
  +        ''}
  +        ${optionalString (cfg.security.secretKeyFile != null) ''
  +          export GF_SECURITY_SECRET_KEY="$(cat ${escapeShellArg cfg.security.secretKeyFile})"
  +        ''}
  +        exec ${cfg.package.bin}/bin/grafana-server -homepath ${cfg.dataDir}
         serviceConfig = {
  -        ExecStart = "${cfg.package.bin}/bin/grafana-server -homepath ${cfg.dataDir}";
           WorkingDirectory = cfg.dataDir;
           User = "grafana";
         };
  
positive.code: 
      environment.systemPackages = [ cfg.package ];
  
      systemd.services.grafana = {
        description = "Grafana Service Daemon";
        wantedBy = ["multi-user.target"];
  
negative.code:       };
  
        adminPassword = mkOption {
          description = ''
            Default admin password.
            This option is mutual exclusive with the adminPasswordFile option.
          '';
          default = "admin";
          type = types.str;
        };
  
        adminPasswordFile = mkOption {
          description = ''
            Default admin password.
            This option is mutual exclusive with the <literal>adminPassword</literal> option.
          '';
          default = null;
          type = types.nullOr types.path;
        };
  
        secretKey = mkOption {
          description = "Secret key used for signing.";
          default = "SW2YcwTIb9zpOOhoPsMm";
          type = types.str;
        };
  
        secretKeyFile = mkOption {
          description = "Secret key used for signing.";
          default = null;
          type = types.nullOr types.path;
        };
      };
  
  