anchor.diff:    } // lib.optionalAttrs (cfg.htpasswd.file != null) {
       display-htpasswd-file = cfg.htpasswd.displayForm;
     } // lib.optionalAttrs tls.enable {
  -    tls-cert = tls.certificate;
  -    tls-key = tls.key;
  +    tls-cert-file = tls.certificate;
  +    tls-key-file = tls.key;
       https-address = tls.httpsAddress;
     } // (getProviderOptions cfg cfg.provider) // cfg.extraConfig;
   
  
positive.code:       '';
      };
  
      proxyPrefix = mkOption {
        type = types.str;
        default = "/oauth2";
  
negative.code: 
      ##############################################
      # PROVIDER configuration
      # Taken from: https://github.com/pusher/oauth2_proxy/blob/master/providers/providers.go
      provider = mkOption {
        type = types.enum [
          "google"
          "azure"
          "facebook"
          "github"
          "keycloak"
          "gitlab"
          "linkedin"
          "login.gov"
          "bitbucket"
          "nextcloud"
          "digitalocean"
          "oidc"
        ];
        default = "google";
        description = ''
  