anchor.diff:          StartLimitBurst = 3;
         };
   
  -      unitConfig.RequiresMountsFor = optional (localDir != null) localDir;
  +      unitConfig.RequiresMountsFor = optional (cfg.storagePath != null) cfg.storagePath;
       };
     };
   
  
positive.code:       after = [ "network.target" ]
             ++ optional (config.services.consul.enable && cfg.storageBackend == "consul") "consul.service";
  
        preStart = optionalString (localDir != null) ''
          install -d -m0700 -o vault -g vault "${localDir}"
        '';
  
        serviceConfig = {
  
negative.code:     };
    };
  
    config = mkIf cfg.enable {
      assertions = [
        { assertion = cfg.storageBackend == "inmem" -> (cfg.storagePath == null && cfg.storageConfig == null);
          message = ''The "inmem" storage expects no services.vault.storagePath nor services.vault.storageConfig'';
        }
        { assertion = (cfg.storageBackend == "file" -> (cfg.storagePath != null && cfg.storageConfig == null)) && (cfg.storagePath != null -> cfg.storageBackend == "file");
          message = ''You must set services.vault.storagePath only when using the "file" backend'';
        }
      ];
  
      users.extraUsers.vault = {
        name = "vault";
  