anchor.diff:  
       systemd.tmpfiles.rules = [
         "d ${stateDir} 0755 chrony chrony - -"
  +      "f ${driftFile} 0640 chrony chrony -"
         "f ${keyFile} 0640 chrony chrony -"
       ];
   
  
positive.code:   cfg = config.services.chrony;
  
    stateDir = "/var/lib/chrony";
    keyFile = "${stateDir}/chrony.keys";
  
    configFile = pkgs.writeText "chrony.conf" ''
  
negative.code:       "initstepslew ${toString cfg.initstepslew.threshold} ${concatStringsSep " " cfg.servers}"
      }
  
      driftfile ${driftFile}
      keyfile ${keyFile}
  
      ${optionalString (!config.time.hardwareClockInLocalTime) "rtconutc"}
  