anchor.diff:      transport_file_type: hash
     '';
   
  -  mailmanCfg = lib.generators.toINI {} cfg.settings;
  +  mailmanCfg = lib.generators.toINI {}
  +    (recursiveUpdate cfg.settings
  +      ((optionalAttrs (cfg.restApiPassFile != null) {
  +        webservice.admin_pass = "#NIXOS_MAILMAN_REST_API_PASS_SECRET#";
  +      })));
  +
  +  mailmanCfgFile = pkgs.writeText "mailman-raw.cfg" mailmanCfg;
   
     mailmanHyperkittyCfg = pkgs.writeText "mailman-hyperkitty.cfg" ''
       [general]
  
positive.code:       mailman-daily = {
          description = "Trigger daily Mailman events";
          startAt = "daily";
          restartTriggers = [ config.environment.etc."mailman.cfg".source ];
          serviceConfig = {
            ExecStart = "${mailmanEnv}/bin/mailman digests --send";
            User = "mailman";
  
negative.code: 
        with open('/var/lib/mailman-web/settings_local.json') as f:
            globals().update(json.load(f))
  
        ${optionalString (cfg.restApiPassFile != null) ''
          with open('${cfg.restApiPassFile}') as f:
              MAILMAN_REST_API_PASS = f.read().rstrip('\n')
        ''}
  
        ${optionalString (cfg.ldap.enable) ''
          import ldap
  