anchor.diff:        };
   
       services.openssh.moduliFile = mkDefault "${cfgc.package}/etc/ssh/moduli";
  +    services.openssh.sftpServerExecutable = mkDefault "${cfgc.package}/libexec/sftp-server";
   
       environment.etc = authKeysFiles //
         { "ssh/moduli".source = cfg.moduliFile;
  
positive.code:           Whether to enable the SFTP subsystem in the SSH daemon.  This
            enables the use of commands such as <command>sftp</command> and
            <command>sshfs</command>.
          '';
        };
  
  
negative.code:         ''}
  
          ${optionalString cfg.allowSFTP ''
            Subsystem sftp ${cfg.sftpServerExecutable} ${concatStringsSep " " cfg.sftpFlags}
          ''}
  
          PermitRootLogin ${cfg.permitRootLogin}
  