anchor.diff:              ${attrsToSection def.dhcpV6Config}
   
             ''}
  +          ${optionalString (def.dhcpServerConfig != { }) ''
  +            [DHCPServer]
  +            ${attrsToSection def.dhcpServerConfig}
  +
  +          ''}
             ${optionalString (def.ipv6PrefixDelegationConfig != {}) ''
               [IPv6PrefixDelegation]
               ${attrsToSection def.ipv6PrefixDelegationConfig}
  
positive.code:             ${attrsToSection def.vrfConfig}
  
            ''}
            ${optionalString (def.wireguardConfig != { }) ''
              [WireGuard]
              ${attrsToSection def.wireguardConfig}
  
            ''}
            ${flip concatMapStrings def.wireguardPeers (x: ''
              [WireGuardPeer]
              ${attrsToSection x.wireguardPeerConfig}
  
            '')}
            ${def.extraConfig}
          '';
      };
  
negative.code:       routingPolicyRuleConfig = mkOption {
          default = { };
          example = { routingPolicyRuleConfig = { Table = 10; IncomingInterface = "eth1"; Family = "both"; } ;};
          type = types.addCheck (types.attrsOf unitOption) check.network.sectionRoutingPolicyRule;
          description = ''
            Each attribute in this set specifies an option in the
            <literal>[RoutingPolicyRule]</literal> section of the unit.  See
  