anchor.diff:          Type = "oneshot";
           WorkingDirectory = cfg.package;
           # System Call Filtering
  -        SystemCallFilter = "~" + lib.concatStringsSep " " systemCallsList;
  +        SystemCallFilter = "~" + lib.concatStringsSep " " (systemCallsList ++ [ "@resources" ]);
         } // cfgService;
   
         after = [ "network.target" ];
  
positive.code:         EnvironmentFile = "/var/lib/mastodon/.secrets_env";
          WorkingDirectory = cfg.package;
          # System Call Filtering
          SystemCallFilter = "~" + lib.concatStringsSep " " (systemCallsList ++ [ "@privileged" ]);
        } // cfgService;
        path = with pkgs; [ file imagemagick ffmpeg ];
      };
  
negative.code:   // (if cfg.smtp.authenticate then { SMTP_LOGIN  = cfg.smtp.user; } else {})
    // cfg.extraConfig;
  
    systemCallsList = [ "@clock" "@cpu-emulation" "@debug" "@keyring" "@module" "@mount" "@obsolete" "@raw-io" "@reboot" "@setuid" "@swap" ];
  
    cfgService = {
      # User and group
  