anchor.diff:        // (mapAttrs' generateKeyServiceUnit
         (filterAttrs (name: value: value.generatePrivateKeyFile) cfg.interfaces));
   
  -  });
  +      systemd.targets = mapAttrs' generateInterfaceTarget cfg.interfaces;
  +    }
  +  );
   
   }
  
positive.code:         '';
        };
  
    generateInterfaceUnit = name: values:
      # exactly one way to specify the private key must be set
      #assert (values.privateKey != null) != (values.privateKeyFile != null);
  
negative.code:         after = [ "network-pre.target" ];
          wants = [ "network.target" ];
          before = [ "network.target" ];
          environment.DEVICE = name;
          path = with pkgs; [ kmod iproute2 wireguard-tools ];
  
  