anchor.diff:      };
   
     };
  -  config = lib.mkIf (sshEnabled || serviceEnabled) {
  +  config = mkIf (sshEnabled || serviceEnabled) {
       environment.systemPackages = [ pkgs.btrbk ] ++ cfg.extraPackages;
       security.sudo.extraRules = [
         {
  
positive.code:         (
            v:
            let
              options = lib.concatMapStringsSep " " (x: "--" + x) v.roles;
              ioniceClass = {
                "idle" = 3;
                "best-effort" = 2;
                "realtime" = 1;
              }.${cfg.ioSchedulingClass};
            in
            ''command="${pkgs.util-linux}/bin/ionice -t -c ${toString ioniceClass} ${lib.optionalString (cfg.niceness >= 1) "${pkgs.coreutils}/bin/nice -n ${toString cfg.niceness}"} ${pkgs.btrbk}/share/btrbk/scripts/ssh_filter_btrbk.sh --sudo ${options}" ${v.key}''
          )
          cfg.sshAccess;
      };
  
negative.code:     )
    ;
    addDefaults = settings: { backend = "btrfs-progs-sudo"; } // settings;
    mkConfigFile = settings: concatStringsSep "\n" (attr2Lines (addDefaults settings));
    mkTestedConfigFile = name: settings:
      let
        configFile = pkgs.writeText "btrbk-${name}.conf" (mkConfigFile settings);
  