anchor.diff:  
         serviceConfig = {
           ExecStart = "${pkgs.rspamd}/bin/rspamd ${optionalString cfg.debug "-d"} --user=${cfg.user} --group=${cfg.group} --pid=/run/rspamd.pid -c ${rspamdConfFile} -f";
  -        RuntimeDirectory = "/var/lib/rspamd";
  -        PermissionsStartOnly = true;
           Restart = "always";
  +        RuntimeDirectory = "rspamd";
  +        PrivateTmp = true;
         };
   
         preStart = ''
  -        ${pkgs.coreutils}/bin/mkdir -p /var/{lib,log}/rspamd
  +        ${pkgs.coreutils}/bin/mkdir -p /var/lib/rspamd
           ${pkgs.coreutils}/bin/chown ${cfg.user}:${cfg.group} /var/lib/rspamd
         '';
   
  
positive.code:       }
  
        logging {
          type = "file";
          filename = "$LOGDIR/rspamd.log";
          .include "$CONFDIR/logging.inc"
        }
  
  
negative.code: 
    mkBindSockets = socks: concatStringsSep "\n" (map (each: "  bind_socket = \"${each}\"") socks);
  
     rspamdConfFile = pkgs.writeText "rspamd.conf"
      ''
        .include "$CONFDIR/common.conf"
  
  