anchor.diff:        path = [ pkgs.coreutils syncServerEnv ];
   
         serviceConfig = {
  -        User = cfg.user;
  -        Group = cfg.group;
  +        User = user;
  +        Group = group;
           PermissionsStartOnly = true;
         };
   
  
positive.code:         '';
        };
  
        user = mkOption {
          type = types.str;
          default = "syncserver";
          description = "User account under which syncserver runs.";
        };
  
        group = mkOption {
          type = types.str;
          default = "syncserver";
          description = "Group account under which syncserver runs.";
        };
  
        publicUrl = mkOption {
          type = types.str;
          default = "http://localhost:5000/";
  
negative.code:           echo  > ${cfg.privateConfig} '[syncserver]'
            echo >> ${cfg.privateConfig} "secret = $(head -c 20 /dev/urandom | sha1sum | tr -d ' -')"
          fi
          chown ${user}:${group} ${cfg.privateConfig}
        '' + optionalString (cfg.sqlUri == defaultSqlUri) ''
          if ! test -e $(dirname ${defaultDbLocation}); then
            mkdir -m 700 -p $(dirname ${defaultDbLocation})
            chown ${user}:${group} $(dirname ${defaultDbLocation})
          fi
          # Move previous database file if it exists
          oldDb="/var/db/firefox-sync-server.db"
          if test -f $oldDb; then
            mv $oldDb ${defaultDbLocation}
            chown ${user}:${group} ${defaultDbLocation}
          fi
        '';
        serviceConfig.ExecStart = "${syncServerEnv}/bin/paster serve ${syncServerIni}";
      };
  
      users.users.syncserver = {
        group = "syncserver";
        isSystemUser = true;
      };
  
      users.groups.syncserver = {};
    };
  }
  