anchor.diff:          User = "matrix-synapse";
           Group = "matrix-synapse";
           WorkingDirectory = cfg.dataDir;
  +        ExecStartPre = [ ("+" + (pkgs.writeShellScript "matrix-synapse-fix-permissions" ''
  +          chown matrix-synapse:matrix-synapse ${cfg.dataDir}/homeserver.signing.key
  +          chmod 0600 ${cfg.dataDir}/homeserver.signing.key
  +        '')) ];
           ExecStart = ''
             ${cfg.package}/bin/homeserver \
               ${ concatMapStringsSep "\n  " (x: "--config-path ${x} \\") ([ configFile ] ++ cfg.extraConfigFiles) }
  
positive.code:         '';
          ExecReload = "${pkgs.util-linux}/bin/kill -HUP $MAINPID";
          Restart = "on-failure";
        };
      };
    };
  
negative.code:     ];
  
      users.users.matrix-synapse = {
        group = "matrix-synapse";
        home = cfg.dataDir;
        createHome = true;
        shell = "${pkgs.bash}/bin/bash";
        uid = config.ids.uids.matrix-synapse;
      };
  
      users.groups.matrix-synapse = {
        gid = config.ids.gids.matrix-synapse;
  