anchor.diff:          type = types.enum ["DEBUG" "INFO" "WARNING" "ERROR" "CRITICAL" "TRACE" "NONE"];
           description = "Log level used by the GlusterFS daemon";
           default = "INFO";
  +      };
  +
  +      useRpcbind = mkOption {
  +        type = types.bool;
  +        description = ''
  +          Enable use of rpcbind. This is required for Gluster's NFS functionality.
  +
  +          You may want to turn it off to reduce the attack surface for DDoS reflection attacks.
  +
  +          See https://davelozier.com/glusterfs-and-rpcbind-portmap-ddos-reflection-attacks/
  +          and https://bugzilla.redhat.com/show_bug.cgi?id=1426842 for details.
  +        '';
  +        default = true;
  +      };
  +
  +      enableGlustereventsd = mkOption {
  +        type = types.bool;
  +        description = "Whether to enable the GlusterFS Events Daemon";
  +        default = true;
         };
   
         extraFlags = mkOption {
  
positive.code:   config = mkIf cfg.enable {
      environment.systemPackages = [ pkgs.glusterfs ];
  
      services.rpcbind.enable = true;
  
      environment.etc = mkIf (cfg.tlsSettings != null) {
        "ssl/glusterfs.pem".source = cfg.tlsSettings.tlsPem;
  
negative.code: 
        wantedBy = [ "multi-user.target" ];
  
        requires = lib.optional cfg.useRpcbind "rpcbind.service";
        after = [ "network.target" "local-fs.target" ] ++ lib.optional cfg.useRpcbind [ "rpcbind.service" ];
  
        preStart = ''
          install -m 0755 -d /var/log/glusterfs
  