anchor.diff:            type = types.str;
             description = "Addon to postfix configuration";
             default = ''
  -smtpd_milters = ${cfg.bindSocket}
  +smtpd_milters = ${head allSockets}
   # or for TCP socket
   # # smtpd_milters = inet:localhost:9900
   milter_protocol = 6
  
positive.code:   rspamdCfg = config.services.rspamd;
    cfg = config.services.rmilter;
  
    rmilterConf = ''
  pidfile = /run/rmilter/rmilter.pid;
  bind_socket = ${cfg.bindSocket};
  tempdir = /tmp;
  
    '' + (with cfg.rspamd; if enable then ''
  
negative.code:         '';
         };
  
        bindUnixSockets =  mkOption {
          type = types.listOf types.str;
          default = ["/run/rmilter/rmilter.sock"];
          description = ''
            Unix domain sockets to listen for MTA requests.
          '';
          example = ''
              [ "/run/rmilter/rmilter.sock"] 
          '';
        };
  
        bindInetSockets = mkOption {
          type = types.listOf types.str;
          default = [];
          description = ''
            Inet addresses to listen (in format accepted by systemd.socket)
          '';
          example = ''
              ["127.0.0.1:11990"]
          '';
        };
  
        socketActivation = mkOption {
          type = types.bool;
          default = true;
          description = ''
            Enable systemd socket activation for rmilter.
            (disabling socket activation not recommended
            when unix socket used, and follow to wrong
            permissions on unix domain socket.)
          '';
        };
  
        rspamd = {
  