anchor.diff:    cfg = config.services.openssh;
   
     nssModulesPath = config.system.nssModules.path;
  -
  -  sshdConfig = pkgs.writeText "sshd_config"
  -    ''
  -      Protocol 2
  -
  -      UsePAM yes
  -
  -      ${ concatMapStrings (port : ''Port ${toString port}
  -                                           '') cfg.ports}
  -
  -      ${if cfg.forwardX11 then "
  -        X11Forwarding yes
  -        XAuthLocation ${pkgs.xlibs.xauth}/bin/xauth
  -      " else "
  -        X11Forwarding no
  -      "}
  -
  -      ${if cfg.allowSFTP then "
  -        Subsystem sftp ${pkgs.openssh}/libexec/sftp-server
  -      " else "
  -      "}
  -
  -      PermitRootLogin ${cfg.permitRootLogin}
  -      GatewayPorts ${cfg.gatewayPorts}
  -    '';
   
     permitRootLoginCheck = v:
       v == "yes" ||
  
positive.code: 
          daemonType = "fork";
  
          exec = "${pkgs.openssh}/sbin/sshd -h /etc/ssh/ssh_host_dsa_key -f ${sshdConfig}";
        };
  
      networking.firewall.allowedTCPPorts = cfg.ports;
    };
  
  }
  
negative.code:         '';
        };
        
        extraConfig = mkOption {
          default = "";
          description = "Verbatim contents of <filename>sshd_config</filename>.";
        };
        
      };
  
    };
  