anchor.diff:  { config, lib, pkgs, ... }:
   
   let
  +  inherit (lib) generators literalExample mkEnableOption mkIf mkOption recursiveUpdate types;
     cfg = config.services.zeronet;
  +  dataDir = "/var/lib/zeronet";
  +  configFile = pkgs.writeText "zeronet.conf" (generators.toINI {} (recursiveUpdate defaultSettings cfg.settings));
   
  -  zConfFile = pkgs.writeTextFile {
  -    name = "zeronet.conf";
  -
  -    text = ''
  -      [global]
  -      data_dir = ${cfg.dataDir}
  -      log_dir = ${cfg.logDir}
  -    '' + lib.optionalString (cfg.port != null) ''
  -      ui_port = ${toString cfg.port}
  -    '' + lib.optionalString (cfg.fileserverPort != null) ''
  -      fileserver_port = ${toString cfg.fileserverPort}
  -    '' + lib.optionalString (cfg.torAlways) ''
  -      tor = always
  -    '' + cfg.extraConfig;
  +  defaultSettings = {
  +    global = {
  +      data_dir = dataDir;
  +      log_dir = dataDir;
  +      ui_port = cfg.port;
  +      fileserver_port = cfg.fileserverPort;
  +      tor = if !cfg.tor then "disable" else if cfg.torAlways then "always" else "enable";
  +    };
     };
   in with lib; {
     options.services.zeronet = {
       enable = mkEnableOption "zeronet";
   
  -    dataDir = mkOption {
  -      type = types.path;
  -      default = "/var/lib/zeronet";
  -      example = "/home/okina/zeronet";
  -      description = "Path to the zeronet data directory.";
  -    };
  +    settings = mkOption {
  +      type = with types; attrsOf (oneOf [ str int bool (listOf str) ]);
  +      default = {};
  +      example = literalExample "global.tor = enable;";
   
  -    logDir = mkOption {
  -      type = types.path;
  -      default = "/var/log/zeronet";
  -      example = "/home/okina/zeronet/log";
  -      description = "Path to the zeronet log directory.";
  +      description = ''
  +        <filename>zeronet.conf</filename> configuration. Refer to
  +        <link xlink:href="https://zeronet.readthedocs.io/en/latest/faq/#is-it-possible-to-use-a-configuration-file"/>
  +        for details on supported values;
  +      '';
       };
   
       port = mkOption {
  -      type = types.nullOr types.int;
  -      default = null;
  +      type = types.int;
  +      default = 43110;
         example = 43110;
         description = "Optional zeronet web UI port.";
       };
  
positive.code:       '';
      };
  
      systemd.tmpfiles.rules = [
        "d '${cfg.dataDir}' 750 zeronet zeronet - -"
        "d '${cfg.logDir}' 750 zeronet zeronet - -"
      ];
  
      systemd.services.zeronet = {
        description = "zeronet";
        after = [ "network.target" (optionalString cfg.tor "tor.service") ];
        wantedBy = [ "multi-user.target" ];
  
        serviceConfig = {
          PrivateTmp = "yes";
          User = "zeronet";
          Group = "zeronet";
          ExecStart = "${pkgs.zeronet}/bin/zeronet --config_file ${zConfFile}";
        };
      };
  
      users = {
        groups.zeronet.gid = config.ids.gids.zeronet;
  
        users.zeronet = {
          description = "zeronet service user";
          home = cfg.dataDir;
          createHome = true;
          group = "zeronet";
          extraGroups = mkIf cfg.tor [ "tor" ];
          uid = config.ids.uids.zeronet;
        };
      };
    };
  
    meta.maintainers = with maintainers; [ chiiruno ];
  }
  
negative.code:       default = false;
        description = "Use TOR for all zeronet traffic.";
      };
    };
  
    config = mkIf cfg.enable {
      services.tor = mkIf cfg.tor {
        enable = true;
        controlPort = 9051;
  
        extraConfig = ''
          CacheDirectoryGroupReadable 1
          CookieAuthentication 1
  