anchor.diff:      })
     ];
   }
  -
  
positive.code:   defaultConfig = builtins.fromJSON (builtins.replaceStrings [ "\\u0026" ] [ "&" ]
      (readFile "${pkgs.mattermost}/config/config.json")
    );
  
    mattermostConf = foldl recursiveUpdate defaultConfig
      [ { ServiceSettings.SiteURL = cfg.siteUrl;
          ServiceSettings.ListenAddress = cfg.listenAddress;
          TeamSettings.SiteName = cfg.siteName;
          SqlSettings.DriverName = "postgres";
          SqlSettings.DataSource = "postgres://${cfg.localDatabaseUser}:${cfg.localDatabasePassword}@localhost:5432/${cfg.localDatabaseName}?sslmode=disable&connect_timeout=10";
        }
        cfg.extraConfig
      ];
  
negative.code:           PermissionsStartOnly = true;
            User = cfg.user;
            Group = cfg.group;
            ExecStart = "${pkgs.mattermost}/bin/mattermost" +
              (lib.optionalString (!cfg.mutableConfig) " -c ${database}");
            WorkingDirectory = "${cfg.statePath}";
            Restart = "always";
            RestartSec = "10";
  