anchor.diff:      };
   
       clientID = mkOption {
  -      type = types.str;
  +      type = types.nullOr types.str;
         description = ''
           The OAuth Client ID.
         '';
  
positive.code:       '';
      };
  
    };
  
    config = mkIf cfg.enable {
  
      users.extraUsers.oauth2_proxy = {
        description = "OAuth2 Proxy";
  
negative.code:         User = "oauth2_proxy";
          Restart = "always";
          ExecStart = "${cfg.package.bin}/bin/oauth2_proxy ${configString}";
          EnvironmentFile = mkIf (cfg.keyFile != null) cfg.keyFile;
        };
      };
  
  