anchor.diff:    imports = [
       (lib.mkRenamedOptionModule [ "services" "zabbixServer" "dbServer" ] [ "services" "zabbixServer" "database" "host" ])
       (lib.mkRemovedOptionModule [ "services" "zabbixServer" "dbPassword" ] "Use services.zabbixServer.database.passwordFile instead.")
  +    (lib.mkRemovedOptionModule [ "services" "zabbixServer" "extraConfig" ] "Use services.zabbixServer.settings instead.")
     ];
   
     # interface
  
positive.code:       { assertion = cfg.database.createLocally -> cfg.database.passwordFile == null;
          message = "a password cannot be specified if services.zabbixServer.database.createLocally is set to true";
        }
      ];
  
      networking.firewall = mkIf cfg.openFirewall {
  
negative.code:   pgsql = config.services.postgresql;
    mysql = config.services.mysql;
  
    inherit (lib) mkDefault mkEnableOption mkIf mkMerge mkOption;
    inherit (lib) attrValues concatMapStringsSep literalExample optional optionalAttrs optionalString types;
    inherit (lib.generators) toKeyValue;
  
    user = "zabbix";
    group = "zabbix";
  