anchor.diff:        '';
       };
   
  +    user = mkOption {
  +      default = "caddy";
  +      type = types.str;
  +      description = "User account under which caddy runs.";
  +    };
  +
  +    group = mkOption {
  +      default = "caddy";
  +      type = types.str;
  +      description = "Group account under which caddy runs.";
  +    };
  +
       adapter = mkOption {
         default = "caddyfile";
         example = "nginx";
  
positive.code:         ExecStart = "${cfg.package}/bin/caddy run --config ${configJSON}";
          ExecReload = "${cfg.package}/bin/caddy reload --config ${configJSON}";
          Type = "simple";
          User = "caddy";
          Group = "caddy";
          Restart = "on-abnormal";
          AmbientCapabilities = "cap_net_bind_service";
          CapabilityBoundingSet = "cap_net_bind_service";
  
negative.code:       };
      };
  
      users.users = optionalAttrs (cfg.user == "caddy") {
        caddy = {
          group = cfg.group;
          uid = config.ids.uids.caddy;
          home = cfg.dataDir;
          createHome = true;
        };
      };
  
      users.groups = optionalAttrs (cfg.group == "caddy") {
        caddy.gid = config.ids.gids.caddy;
      };
  
    };
  }
  