anchor.diff: -{ lib, stdenv
  +{ lib
  +, stdenv
   , fetchzip
   , nixosTests
  -, iptables ? null
  -, iproute ? null
  -, makeWrapper ? null
  -, openresolv ? null
  -, procps ? null
  -, wireguard-go ? null
  +, iptables
  +, iproute
  +, makeWrapper
  +, openresolv
  +, procps
  +, wireguard-go
   }:
  -
  -with lib;
   
   stdenv.mkDerivation rec {
     pname = "wireguard-tools";
  
positive.code:     tests = nixosTests.wireguard;
    };
  
    meta = {
      description = "Tools for the WireGuard secure network tunnel";
      downloadPage = "https://git.zx2c4.com/wireguard-tools/refs/";
      homepage = "https://www.wireguard.com/";
  
negative.code:   postFixup = ''
      substituteInPlace $out/lib/systemd/system/wg-quick@.service \
        --replace /usr/bin $out/bin
    '' + lib.optionalString stdenv.isLinux ''
      for f in $out/bin/*; do
        wrapProgram $f --prefix PATH : ${lib.makeBinPath [ procps iproute iptables openresolv ]}
      done
    '' + lib.optionalString stdenv.isDarwin ''
      for f in $out/bin/*; do
        wrapProgram $f --prefix PATH : ${wireguard-go}/bin
      done
  