anchor.diff:      Deny-IP=${concatStringsSep " " cfg.deniedIPRanges}
     '';
   
  -in
  +  nylonOpts = { name, config, ... }: {
   
  -{
  -
  -  ###### interface
  -
  -  options = {
  -
  -    services.nylon = {
  +    options = {
   
         enable = mkOption {
           type = types.bool;
  
positive.code: 
    homeDir = "/var/lib/nylon";
  
    configFile = pkgs.writeText "nylon.conf" ''
      [General]
      No-Simultaneous-Conn=${toString cfg.nrConnections}
      Log=${if cfg.logging then "1" else "0"}
  
negative.code: 
      users.extraGroups.nylon.gid = config.ids.gids.nylon;
  
      systemd.services = fold (a: b: a // b) {} nylonUnits;
  
    };
  }
  