anchor.diff:      services.avahi.publish.enable = true;
       services.avahi.publish.userServices = true;
   
  -    users.users.${cfg.user} =
  -      { description = "Shairport user";
  +    users = {
  +      users.${cfg.user} = {
  +        description = "Shairport user";
           isSystemUser = true;
           createHome = true;
           home = "/var/lib/shairport-sync";
  +        group = cfg.group;
           extraGroups = [ "audio" ] ++ optional config.hardware.pulseaudio.enable "pulse";
         };
  -
  +      groups.${cfg.group} = {};
  +    };
   
       networking.firewall = mkIf cfg.openFirewall {
         allowedTCPPorts = [ 5000 ];
  
positive.code:         wantedBy = [ "multi-user.target" ];
          serviceConfig = {
            User = cfg.user;
            ExecStart = "${pkgs.shairport-sync}/bin/shairport-sync ${cfg.arguments}";
            RuntimeDirectory = "shairport-sync";
          };
  
negative.code:         '';
        };
  
        group = mkOption {
          type = types.str;
          default = "shairport";
          description = ''
            Group account name under which to run shairport-sync. The account
            will be created.
          '';
        };
  
      };
  
    };
  