anchor.diff:              mkdir -m 0755 -p ${stateDir}
               chown ${torUser} ${stateDir}
             '';
  -        exec = "${tor}/bin/tor -f ${pkgs.writeText "torrc" config.services.tor.config}";
  -      };
  -
  -    jobs.torPrivoxy = mkIf config.services.tor.enablePrivoxy 
  +        exec = "${tor}/bin/tor -f ${pkgs.writeText "torrc" cfg.config}";
  +      };
  +
  +    jobs.torPrivoxy = mkIf (cfg.enablePrivoxy && cfg.enableClient)
         { name = "tor-privoxy";
   
           startOn = "starting tor";
  
positive.code:           instace of privoxy.
          '';
        };
      };
  
    };
  
negative.code: 
    ###### implementation
  
    config = mkIf cfg.enable {
      environment.systemPackages = [ tor ];  # provides tor-resolve and torify
  
      assertions = [{
        assertion = cfg.enableRelay || cfg.enableClient;
        message = "Need to either enable TOR client or relay functionality";
      } {
        assertion = cfg.enableRelay -> !(cfg.isBridgeRelay && cfg.isExitRelay);
        message = "Can't be both an exit and a bridge relay at the same time";
      } ];
  
      users.extraUsers = singleton
        { name = torUser;
          uid = config.ids.uids.tor;
  