anchor.diff:          # Increase the number of available source (local) TCP and UDP ports to 49151.
           # Usual default is 32768 60999, ie. 28231 ports.
           # Find out your current usage with: ss -s
  -        "net.ipv4.ip_local_port_range" = "16384 65535";
  +        "net.ipv4.ip_local_port_range" = mkDefault "16384 65535";
           # Timeout faster generic TCP states.
           # Usual default is 600.
           # Find out your current usage with: watch -n 1 netstat -nptuo
  -        "net.netfilter.nf_conntrack_generic_timeout" = 60;
  +        "net.netfilter.nf_conntrack_generic_timeout" = mkDefault 60;
           # Timeout faster established but inactive connections.
           # Usual default is 432000.
  -        "net.netfilter.nf_conntrack_tcp_timeout_established" = 600;
  +        "net.netfilter.nf_conntrack_tcp_timeout_established" = mkDefault 600;
           # Clear immediately TCP states after timeout.
           # Usual default is 120.
  -        "net.netfilter.nf_conntrack_tcp_timeout_time_wait" = 1;
  +        "net.netfilter.nf_conntrack_tcp_timeout_time_wait" = mkDefault 1;
           # Increase the number of trackable connections.
           # Usual default is 262144.
           # Find out your current usage with: conntrack -C
  -        "net.netfilter.nf_conntrack_max" = 1048576;
  +        "net.netfilter.nf_conntrack_max" = mkDefault 1048576;
         })
       ];
   
  
positive.code:           "/run"
            ] ++
            optional (cfg.settings.script-torrent-done-enabled &&
                      cfg.settings.script-torrent-done-filename != "")
              cfg.settings.script-torrent-done-filename;
          # The following options are only for optimizing:
          # systemd-analyze security transmission
          AmbientCapabilities = "";
  
negative.code:       '' + optionalString cfg.settings.watch-dir-enabled ''
        install -d -m '${cfg.downloadDirPermissions}' -o '${cfg.user}' -g '${cfg.group}' '${cfg.settings.watch-dir}'
        '';
  
      systemd.services.transmission = {
        description = "Transmission BitTorrent Service";
  