anchor.diff:            callSql = e:
                 if cfg.database.type == "pgsql" then ''
                     ${optionalString (cfg.database.password != null) "PGPASSWORD=${cfg.database.password}"} \
  +                  ${optionalString (cfg.database.passwordFile != null) "PGPASSWORD=$(cat ${cfg.database.passwordFile}"}) \
                     ${pkgs.sudo}/bin/sudo -u ${cfg.user} ${config.services.postgresql.package}/bin/psql \
                       -U ${cfg.database.user} \
                       ${optionalString (cfg.database.host != null) "-h ${cfg.database.host} --port ${toString dbPort}"} \
  
positive.code:       define('DB_HOST', '${optionalString (cfg.database.host != null) cfg.database.host}');
        define('DB_USER', '${cfg.database.user}');
        define('DB_NAME', '${cfg.database.name}');
        define('DB_PASS', '${optionalString (cfg.database.password != null) (escape ["'" "\\"] cfg.database.password)}');
        define('DB_PORT', '${toString dbPort}');
  
        define('AUTH_AUTO_CREATE', ${boolToString cfg.auth.autoCreate});
  
negative.code:         };
  
          password = mkOption {
            type = types.nullOr types.str;
            default = null;
            description = ''
              The database user's password.
            '';
          };
  
          passwordFile = mkOption {
            type = types.nullOr types.str;
            default = null;
            description = ''
  