anchor.diff:          serviceConfig =
             { Type         = "simple";
               # Translated from the upstream contrib/dist/tor.service.in
  -            ExecStartPre = "${pkgs.tor}/bin/tor -f ${torRcFile} --verify-config";
  -            ExecStart    = "${pkgs.tor}/bin/tor -f ${torRcFile}";
  +            ExecStartPre = "${cfg.package}/bin/tor -f ${torRcFile} --verify-config";
  +            ExecStart    = "${cfg.package}/bin/tor -f ${torRcFile}";
               ExecReload   = "${pkgs.coreutils}/bin/kill -HUP $MAINPID";
               KillSignal   = "SIGINT";
               TimeoutSec   = 30;
  
positive.code:     User tor
      DataDirectory ${torDirectory}
      ${optionalString cfg.enableGeoIP ''
        GeoIPFile ${pkgs.tor.geoip}/share/tor/geoip
        GeoIPv6File ${pkgs.tor.geoip}/share/tor/geoip6
      ''}
  
      ${optint "ControlPort" cfg.controlPort}
  
negative.code:           };
        };
  
      environment.systemPackages = [ cfg.package ];
  
      services.privoxy = mkIf (cfg.client.enable && cfg.client.privoxy.enable) {
        enable = true;
  