anchor.diff:          User = "minio";
           Group = "minio";
           LimitNOFILE = 65536;
  +        EnvironmentFile = if (cfg.rootCredentialsFile != null) then cfg.rootCredentialsFile
  +                          else if ((cfg.accessKey != "") || (cfg.secretKey != "")) then (legacyCredentials cfg)
  +                          else null;
         };
         environment = {
           MINIO_REGION = "${cfg.region}";
           MINIO_BROWSER = "${if cfg.browser then "on" else "off"}";
  -      } // optionalAttrs (cfg.accessKey != "") {
  -        MINIO_ACCESS_KEY = "${cfg.accessKey}";
  -      } // optionalAttrs (cfg.secretKey != "") {
  -        MINIO_SECRET_KEY = "${cfg.secretKey}";
         };
       };
   
  
positive.code:   };
  
    config = mkIf cfg.enable {
      systemd.tmpfiles.rules = [
        "d '${cfg.configDir}' - minio minio - -"
      ] ++ (map (x:  "d '" + x + "' - minio minio - - ") cfg.dataDir);
  
negative.code:       '';
      };
  
      rootCredentialsFile = mkOption  {
        type = types.nullOr types.path;
        default = null;
        description = ''
          File containing the MINIO_ROOT_USER, default is "minioadmin", and
          MINIO_ROOT_PASSWORD (length >= 8), default is "minioadmin"; in the format of
          an EnvironmentFile=, as described by systemd.exec(5).
        '';
        example = "/etc/nixos/minio-root-credentials";
      };
  
      region = mkOption {
        default = "us-east-1";
        type = types.str;
  