anchor.diff:      pass-access-token = passAccessToken;
       pass-basic-auth = passBasicAuth;
       pass-host-header = passHostHeader;
  +    reverse-proxy = reverseProxy;
       proxy-prefix = proxyPrefix;
       profile-url = profileURL;
       redeem-url = redeemURL;
  
positive.code: 
      ##############################################
      # PROVIDER configuration
      provider = mkOption {
        type = types.enum [
          "google"
          "github"
          "azure"
          "gitlab"
          "linkedin"
          "myusa"
        ];
        default = "google";
        description = ''
  
negative.code:   } // lib.optionalAttrs (cfg.htpasswd.file != null) {
      display-htpasswd-file = cfg.htpasswd.displayForm;
    } // lib.optionalAttrs tls.enable {
      tls-cert-file = tls.certificate;
      tls-key-file = tls.key;
      https-address = tls.httpsAddress;
    } // (getProviderOptions cfg cfg.provider) // cfg.extraConfig;
  
  