anchor.diff:    ];
   };
   
  +  systemd.services.nix-daemon.environment.TMPDIR = "/tmp";
   
   security.setuidOwners = [
   { # Limit access to dumpcap to root and members of the wireshark group.
  
positive.code: ##### Misc stuff (shellInit, powerManagement etc.) #####
  nix = {
    useChroot = true;
    gc.automatic = true;
    gc.dates = "03:15";#src: https://nixos.org/releases/nixos/14.12/nixos-14.12.374.61adf9e/manual/sec-nix-gc.html
  
  
negative.code: #    networking.wireless.enable = false;  # Enables wireless support via wpa_supplicant.
  
        networking = {
          hostName = hostname; #XXX: if never set inhere, defaults to 'nixos'
          firewall.enable = true;
          firewall.allowPing = false; #ipv6 ping is always allowed, src: https://nixos.org/releases/nixos/unstable/nixos-16.09pre79453.32b7b00/manual/index.html#sec-firewall
            networkmanager.enable = false;
  