anchor.diff: -{pkgs, config, ...}:
  +{ config, pkgs, ... }:
  +
  +with pkgs.lib;
   
   let
   
  -  inherit (pkgs.lib) mkOption mkIf;
     inherit (pkgs) openssh;
   
     cfg = config.services.sshd;
  
positive.code:         exec = "${openssh}/sbin/sshd -h /etc/ssh/ssh_host_dsa_key -f ${sshdConfig}";
        };
  
      networking.firewall.allowedTCPPorts = cfg.ports ;
            
    };
  
  
negative.code: 
        UsePAM yes
  
        ${ concatMapStrings (port : ''Port ${toString port}
                                             '') cfg.ports}
  
        ${if cfg.forwardX11 then "
  