anchor.diff:  in
   {
     options.services.oauth2_proxy = {
  -    enable = mkOption {
  -      type = types.bool;
  -      default = false;
  -      description = ''
  -        Whether to run oauth2_proxy.
  -      '';
  -    };
  +    enable = mkEnableOption "oauth2_proxy";
   
       package = mkOption {
         type = types.package;
         default = pkgs.oauth2_proxy;
  +      defaultText = "pkgs.oauth2_proxy";
         description = ''
           The package that provides oauth2_proxy.
         '';
  
positive.code:     upstream = mkOption {
        type = types.commas;
        description = ''
          The http url(s) of the upstream endpoint or file:// paths for static
          files. Routing is based on the path.
        '';
      };
  
  
negative.code:         default = null;
          description = ''
            Additionally authenticate against a htpasswd file. Entries must be
            created with <literal>htpasswd -s</literal> for SHA encryption.
          '';
        };
  
  