anchor.diff:          User = cfg.user;
           Group = cfg.group;
           PrivateTmp = true;
  -        PermissionsStartOnly = true;
           ExecStart = "${pkg}/bin/start-jira.sh -fg";
           ExecStop = "${pkg}/bin/stop-jira.sh";
         };
  
positive.code: 
        preStart = ''
          mkdir -p ${cfg.home}/{logs,work,temp,deploy}
  
          mkdir -p /run/atlassian-jira
          ln -sf ${cfg.home}/{logs,work,temp,server.xml} /run/atlassian-jira
          ln -sf ${cfg.home} /run/atlassian-jira/home
  
          chown ${cfg.user} ${cfg.home}
  
          sed -e 's,port="8080",port="${toString cfg.listenPort}" address="${cfg.listenAddress}",' \
          '' + (lib.optionalString cfg.proxy.enable ''
  
negative.code: 
      users.groups."${cfg.group}" = {};
  
      systemd.tmpfiles.rules = [
        "d '${cfg.home}' - ${cfg.user} - - -"
        "d /run/atlassian-jira - - - - -"
  
        "L+ /run/atlassian-jira/home - - - - ${cfg.home}"
        "L+ /run/atlassian-jira/logs - - - - ${cfg.home}/logs"
        "L+ /run/atlassian-jira/work - - - - ${cfg.home}/work"
        "L+ /run/atlassian-jira/temp - - - - ${cfg.home}/temp"
        "L+ /run/atlassian-jira/server.xml - - - - ${cfg.home}/server.xml"
      ];
  
      systemd.services.atlassian-jira = {
        description = "Atlassian JIRA";
  
  