anchor.diff:        ]);
   
     passwordDescription = ''
  -    The options <option>hashedPassword</option>,
  -    <option>password</option> and <option>passwordFile</option>
  +    The options {option}`hashedPassword`,
  +    {option}`password` and {option}`passwordFile`
       controls what password is set for the user.
  -    <option>hashedPassword</option> overrides both
  -    <option>password</option> and <option>passwordFile</option>.
  -    <option>password</option> overrides <option>passwordFile</option>.
  +    {option}`hashedPassword` overrides both
  +    {option}`password` and {option}`passwordFile`.
  +    {option}`password` overrides {option}`passwordFile`.
       If none of these three options are set, no password is assigned to
       the user, and the user will not be able to do password logins.
  -    If the option <option>users.mutableUsers</option> is true, the
  +    If the option {option}`users.mutableUsers` is true, the
       password defined in one of the three options will only be set when
       the user is created for the first time. After that, you are free to
       change the password with the ordinary user management commands. If
  -    <option>users.mutableUsers</option> is false, you cannot change
  +    {option}`users.mutableUsers` is false, you cannot change
       user passwords, they will always be set according to the password
       options.
     '';
   
     hashedPasswordDescription = ''
  -    To generate a hashed password run <literal>mkpasswd -m sha-512</literal>.
  -
  -    If set to an empty string (<literal>""</literal>), this user will
  +    To generate a hashed password run `mkpasswd -m sha-512`.
  +
  +    If set to an empty string (`""`), this user will
       be able to log in without being asked for a password (but not via remote
  -    services such as SSH, or indirectly via <command>su</command> or
  -    <command>sudo</command>). This should only be used for e.g. bootable
  +    services such as SSH, or indirectly via {command}`su` or
  +    {command}`sudo`). This should only be used for e.g. bootable
       live systems. Note: this is different from setting an empty password,
  -    which can be achieved using <option>users.users.&lt;name?&gt;.password</option>.
  -
  -    If set to <literal>null</literal> (default) this user will not
  -    be able to log in using a password (i.e. via <command>login</command>
  +    which can be achieved using {option}`users.users.<name?>.password`.
  +
  +    If set to `null` (default) this user will not
  +    be able to log in using a password (i.e. via {command}`login`
       command).
     '';
   
  
positive.code:       hashedPassword = mkOption {
          type = with types; nullOr (passwdEntry str);
          default = null;
          description = ''
            Specifies the hashed password for the user.
            ${passwordDescription}
            ${hashedPasswordDescription}
  
negative.code:       initialHashedPassword = mkOption {
          type = with types; nullOr (passwdEntry str);
          default = null;
          description = lib.mdDoc ''
            Specifies the initial hashed password for the user, i.e. the
            hashed password assigned if the user does not already
            exist. If {option}`users.mutableUsers` is true, the
            password can be changed subsequently using the
            {command}`passwd` command. Otherwise, it's
            equivalent to setting the {option}`hashedPassword` option.
  
            ${hashedPasswordDescription}
          '';
  