anchor.diff:        ${ optionalString cfg.enableInsecureSSLv3 "options = -NO_SSLv3" }
   
         ; ----- SERVER CONFIGURATIONS -----
  -      ${ lib.concatStringsSep "\n"
  -           (lib.mapAttrsToList
  -             (n: v: ''
  -               [${n}]
  -               accept = ${toString v.accept}
  -               connect = ${toString v.connect}
  -               cert = ${v.cert}
  -
  -             '')
  -           cfg.servers)
  -      }
  +      ${ generateConfig cfg.servers }
   
         ; ----- CLIENT CONFIGURATIONS -----
  -      ${ lib.concatStringsSep "\n"
  -           (lib.mapAttrsToList
  -             (n: v: ''
  -               [${n}]
  -               client = yes
  -               accept = ${v.accept}
  -               connect = ${v.connect}
  -               verifyChain = ${yesNo v.verifyChain}
  -               verifyPeer = ${yesNo v.verifyPeer}
  -               ${optionalString (v.CAPath != null) "CApath = ${v.CAPath}"}
  -               ${optionalString (v.CAFile != null) "CAFile = ${v.CAFile}"}
  -               ${optionalString (v.verifyHostname != null) "checkHost = ${v.verifyHostname}"}
  -               OCSPaia = yes
  -
  -             '')
  -           cfg.clients)
  -      }
  +      ${ generateConfig cfg.clients }
       '';
   
       systemd.services.stunnel = {
  
positive.code:       };
  
        clients = mkOption {
          description = "Define the client configurations.";
          type = with types; attrsOf (submodule clientConfig);
          example = {
            foobar = {
              accept = "0.0.0.0:8080";
  
negative.code:       })
  
        (mapAttrsToList verifyChainPathAssert cfg.clients)
        (mapAttrsToList (verifyRequiredField "client" "accept") cfg.clients)
        (mapAttrsToList (verifyRequiredField "client" "connect") cfg.clients)
        (mapAttrsToList (verifyRequiredField "server" "accept") cfg.servers)
        (mapAttrsToList (verifyRequiredField "server" "cert") cfg.servers)
        (mapAttrsToList (verifyRequiredField "server" "connect") cfg.servers)
      ];
  
      environment.systemPackages = [ pkgs.stunnel ];
  