anchor.diff:    documentation.nixos.enable = false;
   
     environment = {
  -    etc."grafana/dashboards/dns.json".source = ./6910p-grafana/dns.json;
  -    etc."grafana/dashboards/wireless.json".source =
  -      ./6910p-grafana/wireless.json;
  -
  -    systemPackages = with pkgs; [ certbot inetutils screen ];
  +    systemPackages = with pkgs; [ ];
     };
   
     i18n = { defaultLocale = "en_US.UTF-8"; };
  
positive.code:         cache-size=2000
          local-ttl=3600
          min-cache-ttl=3600
        '';
        servers = [ "127.0.0.1#5300" ];
      };
  
      grafana = {
        addr = "";
        enable = true;
        provision = {
          enable = true;
          dashboards = [{ options.path = "/etc/grafana/dashboards/"; }];
          datasources = [{
            name = "InfluxDB";
            type = "influxdb";
            database = "nequissimus";
            editable = false;
            access = "proxy";
            url = ("http://localhost:8086");
          }];
        };
      };
  
      influxdb.enable = true;
  
      locate = { enable = true; };
  
      logind.extraConfig = "HandleLidSwitch=ignore";
  
      ntp = {
        enable = true;
  
negative.code:   networking = {
      firewall = {
        allowPing = false;
        allowedTCPPorts = [];
        allowedUDPPorts = [];
        enable = true;
        extraCommands = ''
          iptables -A INPUT -p tcp -s 10.0.0.0/8 --dport ${toString dnsmasq_port} -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT
          iptables -A INPUT -p udp -s 10.0.0.0/8 --dport ${toString dnsmasq_port} -m udp -j ACCEPT
  
          iptables -A INPUT -p tcp -s ${ip_ux305c}/32 --dport ${toString (builtins.head config.services.openssh.ports)} -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT
          iptables -A INPUT -p tcp -s ${ip_ux305c}/32 --dport ${toString config.services.kibana.port} -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT
  
          iptables -A INPUT -p udp -s ${ip_imac_eth}/32 --dport ${toString syslog_port} -m udp -j ACCEPT
          iptables -A INPUT -p udp -s ${ip_imac_wifi}/32 --dport ${toString syslog_port} -m udp -j ACCEPT
          iptables -A INPUT -p udp -s ${ip_ap}/32 --dport ${toString syslog_port} -m udp -j ACCEPT
          iptables -A INPUT -p udp -s ${ip_ux305c}/32 --dport ${toString syslog_port} -m udp -j ACCEPT
  
          iptables -A INPUT -p tcp -s ${ip_ux305c}/32 --dport ${toString syslog_port} -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT
  
          iptables -A INPUT -p tcp -s ${ip_ux305c}/32 --dport ${toString beats_port} -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT
        '';
      };
  
      hostName = "hape";
  