anchor.diff:        isReadOnly = false;
       };
       config = {
  -      users.users.browser = { isNormalUser = true; uid = 1000; };
  -      environment.systemPackages = with pkgs; [ xpra chromium protonvpn-cli coreutils start_xpra ];
  +      users.users.browser = { isNormalUser = true; uid = 1000; extraGroups = [ "video" ]; };
  +      environment.systemPackages = with pkgs; [ chromium protonvpn-cli coreutils start_xpra ];
         system.activationScripts.startup = ''
           mkdir -p /run/user/1000
           chown 1000 /run/user/1000
  
positive.code:       hardware.opengl.enable = true;
        hardware.opengl.extraPackages = config.hardware.opengl.extraPackages;
        networking.firewall.enable = false;
        boot.kernelPackages = pkgs.linuxPackages_latest;
      };
    };
    system.activationScripts.container_vpn_startup = ''
  
negative.code:     sudo nixos-container run vpn -- protonvpn c -f
      sudo nixos-container run vpn -- start_xpra $@ &
  
      while ! ${pkgs.socat}/bin/socat -u OPEN:/dev/null UNIX-CONNECT:/run/xpra-vpn/vpn-0
      do
        echo "Waiting for /run/xpra-vpn/vpn-0 ..."
        sleep 1
      done
  
      ${xpra}/bin/xpra attach --opengl=yes --video-encoders=rgb24 socket:///run/xpra-vpn/vpn-0
  
      sudo nixos-container run vpn -- protonvpn d
    '';
  