anchor.diff:        };
       };
   
  -    users = mkIf (cfg.user == "gitea") {
  -      users.gitea = {
  +    users.users = mkIf (cfg.user == "gitea") {
  +      gitea = {
           description = "Gitea Service";
           home = cfg.stateDir;
           createHome = true;
           useDefaultShell = true;
  -      };
  -    };
  +        group = "gitea";
  +      };
  +    };
  +
  +    users.groups.gitea = {};
   
       warnings = optional (cfg.database.password != "")
         ''config.services.gitea.database.password will be stored as plaintext
  
positive.code:         }
        ];
      };
  
      systemd.services.gitea = {
        description = "gitea";
  
negative.code:       serviceConfig = {
          Type = "simple";
          User = cfg.user;
          Group = "gitea";
          WorkingDirectory = cfg.stateDir;
          PermissionsStartOnly = true;
          ExecStart = "${gitea.bin}/bin/gitea web";
  