anchor.diff:              Read the repository password from a file.
             '';
             example = "/etc/nixos/restic-password";
  +        };
  +
  +        environmentFile = mkOption {
  +          type = with types; nullOr str;
  +          # added on 2021-08-28, s3CredentialsFile should
  +          # be removed in the future (+ remember the warning)
  +          default = config.s3CredentialsFile;
  +          description = ''
  +            file containing the credentials to access the repository, in the
  +            format of an EnvironmentFile as described by systemd.exec(5)
  +          '';
           };
   
           s3CredentialsFile = mkOption {
  
positive.code:             RuntimeDirectory = "restic-backups-${name}";
              CacheDirectory = "restic-backups-${name}";
              CacheDirectoryMode = "0700";
            } // optionalAttrs (backup.s3CredentialsFile != null) {
              EnvironmentFile = backup.s3CredentialsFile;
            };
          } // optionalAttrs (backup.initialize || backup.dynamicFilesFrom != null) {
            preStart = ''
  
negative.code:     description = ''
        Periodic backups to create with Restic.
      '';
      type = types.attrsOf (types.submodule ({ config, name, ... }: {
        options = {
          passwordFile = mkOption {
            type = types.str;
  