anchor.diff:        '';
       };
   
  +    setXauthrequest = mkOption {
  +      type = types.nullOr types.bool;
  +      default = null;
  +      description = ''
  +        Set X-Auth-Request-User and X-Auth-Request-Email response headers (useful in Nginx auth_request mode).
  +      '';
  +    };
  +
       extraConfig = mkOption {
         default = {};
         description = ''
  
positive.code:       '';
      };
  
    };
  
    config = mkIf cfg.enable {
  
      users.extraUsers.oauth2_proxy = {
        description = "OAuth2 Proxy";
  
negative.code:     };
  
      clientSecret = mkOption {
        type = types.nullOr types.str;
        description = ''
          The OAuth Client Secret.
        '';
  