anchor.diff:          {
             DOMAIN = cfg.domain;
             STATIC_ROOT_PATH = cfg.staticRootPath;
  -          LFS_JWT_SECRET = "#jwtsecret#";
  +          LFS_JWT_SECRET = "#lfsjwtsecret#";
             ROOT_URL = cfg.rootUrl;
           }
           (mkIf cfg.enableUnixSocket {
  
positive.code:       wantedBy = [ "multi-user.target" ];
        path = [ gitea pkgs.git ];
  
        preStart = let
          runConfig = "${cfg.stateDir}/custom/conf/app.ini";
          secretKey = "${cfg.stateDir}/custom/conf/secret_key";
          jwtSecret = "${cfg.stateDir}/custom/conf/jwt_secret";
        in ''
          # copy custom configuration and generate a random secret key if needed
          ${optionalString (cfg.useWizard == false) ''
  
negative.code: 
        security = {
          SECRET_KEY = "#secretkey#";
          INTERNAL_TOKEN = "#internaltoken#";
          INSTALL_LOCK = true;
        };
  
  