anchor.diff:      };
     };
   
  -  config = mkMerge [
  -    (mkIf cfg.enable {
  +  config = mkIf cfg.enable {
  +    warnings = optional options.services.matterbridge.configFile.isDefined
  +      "The option services.matterbridge.configFile is insecure and should be replaced with services.matterbridge.configPath";
   
  -      users.extraUsers = mkIf (cfg.user == "matterbridge") [
  -        { name = "matterbridge";
  -          group = "matterbridge";
  -        } ];
  +    users.extraUsers = optional (cfg.user == "matterbridge")
  +      { name = "matterbridge";
  +        group = "matterbridge";
  +      };
   
  -      users.extraGroups = mkIf (cfg.group == "matterbridge") [
  -        { name = "matterbridge";
  -        } ];
  +    users.extraGroups = optional (cfg.group == "matterbridge")
  +      { name = "matterbridge";
  +      };
   
  -      systemd.services.matterbridge = {
  -        description = "Matterbridge chat platform bridge";
  -        wantedBy = [ "multi-user.target" ];
  -        after = [ "network.target" ];
  +    systemd.services.matterbridge = {
  +      description = "Matterbridge chat platform bridge";
  +      wantedBy = [ "multi-user.target" ];
  +      after = [ "network.target" ];
   
  -        serviceConfig = {
  -          User = cfg.user;
  -          Group = cfg.group;
  -          ExecStart = "${pkgs.matterbridge.bin}/bin/matterbridge -conf ${matterbridgeConfToml}";
  -          Restart = "always";
  -          RestartSec = "10";
  -        };
  +      serviceConfig = {
  +        User = cfg.user;
  +        Group = cfg.group;
  +        ExecStart = "${pkgs.matterbridge.bin}/bin/matterbridge -conf ${matterbridgeConfToml}";
  +        Restart = "always";
  +        RestartSec = "10";
         };
  -    })
  -  ];
  +    };
  +  };
   }
  -
  
positive.code:     services.matterbridge = {
        enable = mkEnableOption "Matterbridge chat platform bridge";
  
        configFile = mkOption {
          type = types.str;
          example = ''
            #WARNING: as this file contains credentials, be sure to set correct file permissions          [irc]
                [irc.freenode]
                Server="irc.freenode.net:6667"
                Nick="matterbot"
  
            [mattermost]
                [mattermost.work]
                 #do not prefix it wit http:// or https://
                 Server="yourmattermostserver.domain"
                 Team="yourteam"
                 Login="yourlogin"
  
negative.code:               channel="off-topic"
          '';
          description = ''
            WARNING: THIS IS INSECURE, as your password will end up in
            <filename>/nix/store</filename>, thus publicly readable. Use
            <literal>services.matterbridge.configPath</literal> instead.
  
            The matterbridge configuration file in the TOML file format.
          '';
        };
  