anchor.diff:          CapabilityBoundingSet = [ "CAP_NET_BIND_SERVICE" ];
         };
         environment = env // {
  -        PATH = mkForce cfg.package.path;
  -        PYTHONPATH = "${cfg.package.pythonPath}:${cfg.package}/lib/paperless-ngx/src";
  +        PATH = mkForce pkg.path;
  +        PYTHONPATH = "${pkg.pythonPath}:${pkg}/lib/paperless-ngx/src";
         };
         # Allow the web interface to access the private /tmp directory of the server.
         # This is required to support uploading files via the web interface.
  
positive.code:         superuserStateFile="${cfg.dataDir}/superuser-state"
  
          if [[ $(cat "$superuserStateFile" 2>/dev/null) != $superuserState ]]; then
            ${cfg.package}/bin/paperless-ngx manage_superuser
            echo "$superuserState" > "$superuserStateFile"
          fi
        '';
  
negative.code:         User = cfg.user;
          ExecStart = ''
            ${pkgs.python3Packages.gunicorn}/bin/gunicorn \
              -c ${pkg}/lib/paperless-ngx/gunicorn.conf.py paperless.asgi:application
          '';
          Restart = "on-failure";
  
  