anchor.diff:    config = mkIf cfg.enable {
       meta.maintainers = with lib.maintainers; [ thoughtpolice ];
   
  -    environment.systemPackages = [ pkgs.chrony ];
  +    environment.systemPackages = [ chronyPkg ];
   
       users.groups.chrony.gid = config.ids.gids.chrony;
   
  
positive.code: 
  let
    cfg = config.services.chrony;
  
    stateDir = cfg.directory;
    driftFile = "${stateDir}/chrony.drift";
  
negative.code:         after    = [ "network.target" ];
          conflicts = [ "ntpd.service" "systemd-timesyncd.service" ];
  
          path = [ chronyPkg ];
  
          unitConfig.ConditionCapability = "CAP_SYS_TIME";
          serviceConfig =
            { Type = "simple";
              ExecStart = "${chronyPkg}/bin/chronyd ${chronyFlags}";
  
              ProtectHome = "yes";
              ProtectSystem = "full";
  