anchor.diff:        path = (with pkgs; [ curl gawk which ]) ++ lib.optional cfg.python.enable
           (pkgs.python3.withPackages cfg.python.extraPackages);
         serviceConfig = {
  -        Environment="PYTHONPATH=${pkgs.netdata}/libexec/netdata/python.d/python_modules";
  -        ExecStart = "${pkgs.netdata}/bin/netdata -P /run/netdata/netdata.pid -D -c ${configFile}";
  +        Environment="PYTHONPATH=${cfg.package}/libexec/netdata/python.d/python_modules";
  +        ExecStart = "${cfg.package}/bin/netdata -P /run/netdata/netdata.pid -D -c ${configFile}";
           ExecReload = "${pkgs.utillinux}/bin/kill -s HUP -s USR1 -s USR2 $MAINPID";
           TimeoutStopSec = 60;
           # User and group
  
positive.code:   options = {
      services.netdata = {
        enable = mkEnableOption "netdata";
  
        user = mkOption {
          type = types.str;
  
negative.code:     systemd.enableCgroupAccounting = true;
  
      security.wrappers."apps.plugin" = {
        source = "${cfg.package}/libexec/netdata/plugins.d/apps.plugin.org";
        capabilities = "cap_dac_read_search,cap_sys_ptrace+ep";
        owner = cfg.user;
        group = cfg.group;
  