anchor.diff:          "${pkgs.libreswan}"
           "${pkgs.iproute}"
           "${pkgs.procps}"
  +        "${pkgs.nssTools}"
  +        "${pkgs.iptables}"
  +        "${pkgs.nettools}"
         ];
   
         wants = [ "network-online.target" ];
  
positive.code:     ''
        config setup
        ${configText}
        
        ${connectionText}
      '';
  
  
negative.code:       else substring (head nonchars).ind (add 1 (sub (last nonchars).ind (head nonchars).ind)) str;
    indent = str: concatStrings (concatMap (s: ["  " (trim [" " "\t"] s) "\n"]) (splitString "\n" str));
    configText = indent (toString cfg.configSetup);
    connectionText = concatStrings (mapAttrsToList (n: v:
      ''
        conn ${n}
        ${indent v}
  