anchor.diff:          services = {
               mingetty.greetingLine = ''[[[ \l @ \n (\s \r \m) ]]]''; # getty message
               gpm.enable = true;
  +            hostapd = {
  +                enable = true;
  +                interface = "wlp6s0";
  +                hwMode = "g";
  +                channel = 1;
  +                wpa = false;
  +                ssid = (builtins.readFile ./secrets/ap_ssid);
  +                extraConfig = ''
  +                    auth_algs=1
  +                    wpa=2
  +                    wpa_key_mgmt=WPA-PSK
  +                    wpa_passphrase=${builtins.readFile ./secrets/ap_pass}
  +                    wpa_pairwise=CCMP TKIP
  +                    rsn_pairwise=CCMP
  +                    ieee80211n=1
  +                    wmm_enabled=1
  +                    country_code=AU
  +                    ieee80211d=1
  +                    ht_capab=[HT40+][SHORT-GI-20][SHORT-GI-40][DSSS_CCK-40]
  +                '';
  +            };
  +            dnsmasq = {
  +                enable = true;
  +                extraConfig = ''
  +                    interface=wlp6s0
  +                    bind-interfaces
  +                    dhcp-range=10.0.0.2,10.0.0.254
  +                '';
  +                resolveLocalQueries = true;
  +                servers = [ 
  +                    "192.231.203.132" 
  +                    "192.231.203.3" 
  +                    "8.8.8.8" 
  +                    "8.8.4.4"
  +                    "209.244.0.3" 
  +                    "209.244.0.4" 
  +                    "2001:44b8:1::1" 
  +                    "2001:44b8:2::2"
  +                    "2001:4860:4860::8888"
  +                    "2001:1608:10:25::1c04:b12f"
  +                ];
  +            };
               openssh = {
                   enable = true;
                   startWhenNeeded = true;
  
positive.code:             gnugrep       # grep
              gawk          # awk
              ncurses       # tput (terminal control)
              iproute       # ip, tc
              nettools      # hostname, ifconfig
              pciutils      # lspci, setpci
  
negative.code:                     home = "/home/cmcdragonkai";
                      createHome = true;
                      useDefaultShell = true;
                      hashedPassword = builtins.readFile ./secrets/operator_password_hash;
                      openssh.authorizedKeys.keyFiles = [ ./identity.pub ];
                  };
              };
  