anchor.diff:        default = "/etc/raddb";
         description = ''
           The path of the freeradius server configuration directory.
  +      '';
  +    };
  +
  +    debug = mkOption {
  +      type = types.bool;
  +      default = false;
  +      description = ''
  +        Whether to enable debug logging for freeradius (-xx
  +        option). This should not be left on, since it includes
  +        sensitive data such as passwords in the logs.
         '';
       };
   
  
positive.code:     };
  
      systemd.services.freeradius = freeradiusService cfg;
  
    };
  
  
negative.code:     '';
  
      serviceConfig = {
          ExecStart = "${pkgs.freeradius}/bin/radiusd -f -d ${cfg.configDir} -l stdout" +
                      optionalString cfg.debug " -xx";
          ExecReload = [
            "${pkgs.freeradius}/bin/radiusd -C -d ${cfg.configDir} -l stdout"
            "${pkgs.coreutils}/bin/kill -HUP $MAINPID"
  