anchor.diff:  with lib;
   
   let
  -
     cfg = config.services.sks;
  -
     sksPkg = cfg.package;
   
  -in
  -
  -{
  +in {
  +  meta.maintainers = with maintainers; [ primeos calbrecht jcumming ];
   
     options = {
   
       services.sks = {
   
  -      enable = mkEnableOption "sks";
  +      enable = mkEnableOption ''
  +        SKS (synchronizing key server for OpenPGP) and start the database
  +        server. You need to create "''${dataDir}/dump/*.gpg" for the initial
  +        import'';
   
         package = mkOption {
           default = pkgs.sks;
           defaultText = "pkgs.sks";
           type = types.package;
  -        description = "
  -          Which sks derivation to use.
  -        ";
  +        description = "Which SKS derivation to use.";
         };
   
         dataDir = mkOption {
  
positive.code:       home = config.users.users.sks.home;
        user = config.users.users.sks.name;
      in {
        sks-keyserver = {
          wantedBy = [ "multi-user.target" ];
          preStart = ''
            mkdir -p ${home}/dump
            ${pkgs.sks}/bin/sks build ${home}/dump/*.gpg -n 10 -cache 100 || true #*/
            ${pkgs.sks}/bin/sks cleandb || true
            ${pkgs.sks}/bin/sks pbuild -cache 20 -ptree_cache 70 || true
          '';
          serviceConfig = {
            WorkingDirectory = home;
            User = user;
            Restart = "always";
            ExecStart = "${pkgs.sks}/bin/sks db -hkp_address ${hkpAddress} -hkp_port ${hkpPort}";
          };
        };
      };
  
negative.code:       hkpAddress = mkOption {
          default = [ "127.0.0.1" "::1" ];
          type = types.listOf types.str;
          description = ''
            Domain names, IPv4 and/or IPv6 addresses to listen on for HKP
            requests.
          '';
        };
  
        hkpPort = mkOption {
          default = 11371;
          type = types.ints.u16;
          description = "HKP port to listen on.";
        };
      };
    };
  