anchor.diff:        serviceConfig = {
           Type = "simple";
           User = cfg.user;
  +        Group = "gitea";
           WorkingDirectory = cfg.stateDir;
           PermissionsStartOnly = true;
           ExecStart = "${gitea.bin}/bin/gitea web";
  
positive.code:         }
        ];
      };
  
      systemd.services.gitea = {
        description = "gitea";
  
negative.code:       };
      };
  
      users.users = mkIf (cfg.user == "gitea") {
        gitea = {
          description = "Gitea Service";
          home = cfg.stateDir;
          createHome = true;
          useDefaultShell = true;
          group = "gitea";
        };
      };
  
      users.groups.gitea = {};
  
      warnings = optional (cfg.database.password != "")
        ''config.services.gitea.database.password will be stored as plaintext
  