anchor.diff:          # files. So prefix the ExecStart command with "!" to prevent systemd
           # from dropping privileges early. See ExecStart in systemd.service(5).
           serviceConfig =
  -          { ExecStart = "!@${nscd}/sbin/nscd nscd";
  +          { ExecStart = "!@${cfg.package}/bin/nscd nscd";
               Type = "forking";
               DynamicUser = true;
               RuntimeDirectory = "nscd";
               PIDFile = "/run/nscd/nscd.pid";
               Restart = "always";
               ExecReload =
  -              [ "${nscd}/sbin/nscd --invalidate passwd"
  -                "${nscd}/sbin/nscd --invalidate group"
  -                "${nscd}/sbin/nscd --invalidate hosts"
  +              [ "${cfg.package}/bin/nscd --invalidate passwd"
  +                "${cfg.package}/bin/nscd --invalidate group"
  +                "${cfg.package}/bin/nscd --invalidate hosts"
                 ];
             };
         };
  
positive.code:         type = types.lines;
          default = builtins.readFile ./nscd.conf;
          description = "Configuration to use for Name Service Cache Daemon.";
        };
  
      };
  
negative.code: 
    nssModulesPath = config.system.nssModules.path;
    cfg = config.services.nscd;
  
  in
  
  