anchor.diff:            Whether to enable the SFTP subsystem in the SSH daemon.  This
             enables the use of commands such as <command>sftp</command> and
             <command>sshfs</command>.
  +        '';
  +      };
  +
  +      sftpFlags = mkOption {
  +        type = with types; listOf str;
  +        default = [];
  +        example = [ "-f AUTHPRIV" "-l INFO" ];
  +        description = ''
  +          Commandline flags to add to sftp-server.
           '';
         };
   
  
positive.code:       };
  
        moduliFile = mkOption {
          example = "services.openssh.moduliFile = /etc/my-local-ssh-moduli;";
          type = types.path;
          description = ''
            Path to <literal>moduli</literal> file to install in
  
negative.code:         ''}
  
          ${optionalString cfg.allowSFTP ''
            Subsystem sftp ${cfgc.package}/libexec/sftp-server ${concatStringsSep " " cfg.sftpFlags}
          ''}
  
          PermitRootLogin ${cfg.permitRootLogin}
  