anchor.diff:        '';
       };
   
  +    rootCredentialsFile = mkOption  {
  +      type = types.nullOr types.path;
  +      default = null;
  +      description = ''
  +        File containing the MINIO_ROOT_USER, default is "minioadmin", and
  +        MINIO_ROOT_PASSWORD (length >= 8), default is "minioadmin"; in the format of
  +        an EnvironmentFile=, as described by systemd.exec(5).
  +      '';
  +      example = "/etc/nixos/minio-root-credentials";
  +    };
  +
       region = mkOption {
         default = "us-east-1";
         type = types.str;
  
positive.code:   };
  
    config = mkIf cfg.enable {
      systemd.tmpfiles.rules = [
        "d '${cfg.configDir}' - minio minio - -"
      ] ++ (map (x:  "d '" + x + "' - minio minio - - ") cfg.dataDir);
  
negative.code:         User = "minio";
          Group = "minio";
          LimitNOFILE = 65536;
          EnvironmentFile = if (cfg.rootCredentialsFile != null) then cfg.rootCredentialsFile
                            else if ((cfg.accessKey != "") || (cfg.secretKey != "")) then (legacyCredentials cfg)
                            else null;
        };
        environment = {
          MINIO_REGION = "${cfg.region}";
          MINIO_BROWSER = "${if cfg.browser then "on" else "off"}";
        };
      };
  
  