anchor.diff:          '';
         };
   
  +      controlSocket = {
  +        enable = mkOption {
  +          type = types.bool;
  +          default = false;
  +          description = ''
  +            Wheter to enable Tor control socket. Control socket is created
  +            in <literal>${torRunDirectory}/control</literal>
  +          '';
  +        };
  +      };
  +
         client = {
           enable = mkOption {
             type = types.bool;
  
positive.code:     ''}
  
      ${optint "ControlPort" cfg.controlPort}
    ''
    # Client connection config
    + optionalString cfg.client.enable ''
  
negative.code:             DevicePolicy            = "closed";
              InaccessibleDirectories = "/home";
              ReadOnlyDirectories     = "/";
              ReadWriteDirectories    = [torDirectory torRunDirectory];
              NoNewPrivileges         = "yes";
            };
        };
  