anchor.diff:      builtins.substring 0 1 x == "/"      # absolute path
       || builtins.substring 0 1 x == "."   # relative path
       || builtins.match "[.*:.*]" == null; # not machine:path
  - 
  +
     mkExcludeFile = cfg:
       # Write each exclude pattern to a new line
       pkgs.writeText "excludefile" (concatStringsSep "\n" cfg.exclude);
  
positive.code:             example = "user@machine:/path/to/repo";
            };
  
            archiveBaseName = mkOption {
              type = types.strMatching "[^/{}]+";
              default = "${globalConfig.networking.hostName}-${name}";
  
negative.code:       + " without at least one public key";
    };
  
    mkRemovableDeviceAssertions = name: cfg: {
      assertion = !(isLocalPath cfg.repo) -> !cfg.removableDevice;
      message = ''
        borgbackup.repos.${name}: repo isn't a local path, thus it can't be a removable device!
      '';
    };
  
  in {
    meta.maintainers = with maintainers; [ dotlambda ];
  
  