anchor.diff:  
     config = mkIf cfg.enable {
   
  -    systemd.services.syncserver = let
  -      user = "syncserver";
  -      group = "syncserver";
  -    in {
  +    systemd.services.syncserver = {
         after = [ "network.target" ];
         description = "Firefox Sync Server";
         wantedBy = [ "multi-user.target" ];
  
positive.code:       '';
      };
  
      users.users.syncserver = {
        group = "syncserver";
        isSystemUser = true;
      };
  
      users.groups.syncserver = {};
    };
  }
  
negative.code:     audiences = ${removeSuffix "/" cfg.publicUrl}
    '';
  
    user = "syncserver";
    group = "syncserver";
  in
  
  {
  