anchor.diff:      };
   
       systemd.services.mastodon-web = {
  -      after = [ "network.target" ]
  -        ++ (if databaseActuallyCreateLocally then [ "postgresql.service" ] else [])
  -        ++ (if cfg.automaticMigrations then [ "mastodon-init-db.service" ] else [ "mastodon-init-dirs.service" ]);
  +      after = [ "network.target" "mastodon-init-dirs.service" ]
  +        ++ lib.optional databaseActuallyCreateLocally "postgresql.service"
  +        ++ lib.optional cfg.automaticMigrations "mastodon-init-db.service";
  +      requires = [ "mastodon-init-dirs.service" ]
  +        ++ lib.optional databaseActuallyCreateLocally "postgresql.service"
  +        ++ lib.optional cfg.automaticMigrations "mastodon-init-db.service";
  +      wantedBy = [ "multi-user.target" ];
         description = "Mastodon web";
  -      wantedBy = [ "multi-user.target" ];
         environment = env // (if cfg.enableUnixSocket
           then { SOCKET = "/run/mastodon-web/web.socket"; }
           else { PORT = toString(cfg.webPort); }
  
positive.code:     };
  
      systemd.services.mastodon-sidekiq = {
        after = [ "network.target" ]
          ++ (if databaseActuallyCreateLocally then [ "postgresql.service" ] else [])
          ++ (if cfg.automaticMigrations then [ "mastodon-init-db.service" ] else [ "mastodon-init-dirs.service" ]);
        description = "Mastodon sidekiq";
        wantedBy = [ "multi-user.target" ];
        environment = env // {
          PORT = toString(cfg.sidekiqPort);
          DB_POOL = toString cfg.sidekiqThreads;
  
negative.code:         # System Call Filtering
          SystemCallFilter = [ ("~" + lib.concatStringsSep " " (systemCallsList ++ [ "@resources" ])) "@chown" "pipe" "pipe2" ];
        } // cfgService;
        after = [ "network.target" "mastodon-init-dirs.service" ]
          ++ lib.optional databaseActuallyCreateLocally "postgresql.service";
        requires = [ "mastodon-init-dirs.service" ]
          ++ lib.optional databaseActuallyCreateLocally "postgresql.service";
      };
  
      systemd.services.mastodon-streaming = {
        after = [ "network.target" "mastodon-init-dirs.service" ]
          ++ lib.optional databaseActuallyCreateLocally "postgresql.service"
          ++ lib.optional cfg.automaticMigrations "mastodon-init-db.service";
        requires = [ "mastodon-init-dirs.service" ]
          ++ lib.optional databaseActuallyCreateLocally "postgresql.service"
          ++ lib.optional cfg.automaticMigrations "mastodon-init-db.service";
        wantedBy = [ "multi-user.target" ];
        description = "Mastodon streaming";
        environment = env // (if cfg.enableUnixSocket
          then { SOCKET = "/run/mastodon-streaming/streaming.socket"; }
          else { PORT = toString(cfg.streamingPort); }
  