anchor.diff:            foo = {
               server = "tunnel.mdomain.com";
               relay = "8.8.8.8";
  -            extraConfig = "-P mysecurepassword";
  +            extraConfig = "-v";
             }
           }
           '';
  
positive.code:         description = "iodine, ip over dns server daemon";
          after = [ "network.target" ];
          wantedBy = [ "multi-user.target" ];
          serviceConfig.ExecStart = "${pkgs.iodine}/bin/iodined -f -u ${iodinedUser} ${cfg.server.extraConfig} ${cfg.server.ip} ${cfg.server.domain}";
        };
      };
  
  
negative.code:         description = "iodine client - ${name}";
          after = [ "network.target" ];
          wantedBy = [ "multi-user.target" ];
          preStart = ''
            cat > /run/iodine/${name}-script << EOF
              #!/bin/sh
              ${pkgs.iodine}/bin/iodine -f -u ${iodinedUser} ${cfg.extraConfig} ${optionalString (cfg.passwordFile != "") "-P $(cat \"${cfg.passwordFile}\")"} ${cfg.relay} ${cfg.server}
            EOF
            chmod 700 /run/iodine/${name}-script
          '';
          script = "/run/iodine/${name}-script";
          serviceConfig = {
            RestartSec = "30s";
            Restart = "always";
            RuntimeDirectory = [ "iodine" ];
          };
        };
      in
  