anchor.diff:        description = "Paperless document consumer";
         serviceConfig = defaultServiceConfig // {
           User = cfg.user;
  -        ExecStart = "${cfg.package}/bin/paperless-ngx document_consumer";
  +        ExecStart = "${pkg}/bin/paperless-ngx document_consumer";
           Restart = "on-failure";
         };
         environment = env;
  
positive.code:     setupEnv = lib.concatStringsSep "\n" (mapAttrsToList (name: val: "export ${name}=\"${val}\"") env);
    in pkgs.writeShellScript "manage" ''
      ${setupEnv}
      exec ${cfg.package}/bin/paperless-ngx "$@"
    '';
  
    # Secure the services
  
negative.code:       description = "Paperless scheduler";
        serviceConfig = defaultServiceConfig // {
          User = cfg.user;
          ExecStart = "${pkg}/bin/paperless-ngx qcluster";
          Restart = "on-failure";
          # The `mbind` syscall is needed for running the classifier.
          SystemCallFilter = defaultServiceConfig.SystemCallFilter ++ [ "mbind" ];
  