anchor.diff:          RuntimeDirectory = "mastodon-streaming";
           RuntimeDirectoryMode = "0750";
           # System Call Filtering
  -        SystemCallFilter = "~" + lib.concatStringsSep " " (systemCallsList ++ [ "@resources" ]);
  +        SystemCallFilter = [ ("~" + lib.concatStringsSep " " (systemCallsList ++ [ "@resources" ])) "pipe" "pipe2" ];
         } // cfgService;
       };
   
  
positive.code:         EnvironmentFile = "/var/lib/mastodon/.secrets_env";
          WorkingDirectory = cfg.package;
          # System Call Filtering
          SystemCallFilter = [ ("~" + lib.concatStringsSep " " (systemCallsList ++ [ "@resources" ])) "@chown" ];
        } // cfgService;
        after = [ "mastodon-init-dirs.service" "network.target" ] ++ (if databaseActuallyCreateLocally then [ "postgresql.service" ] else []);
        wantedBy = [ "multi-user.target" ];
  
negative.code:         Type = "oneshot";
          WorkingDirectory = cfg.package;
          # System Call Filtering
          SystemCallFilter = [ ("~" + lib.concatStringsSep " " (systemCallsList ++ [ "@resources" ])) "@chown" "pipe" "pipe2" ];
        } // cfgService;
  
        after = [ "network.target" ];
  