anchor.diff:          exec = "${openssh}/sbin/sshd -h /etc/ssh/ssh_host_dsa_key -f ${sshdConfig}";
         };
   
  -    networking.firewall.allowedTCPPorts = cfg.ports ;
  +    networking.firewall.allowedTCPPorts = cfg.ports;
             
     };
   
  
positive.code: {pkgs, config, ...}:
  
  let
  
    inherit (pkgs.lib) mkOption mkIf;
    inherit (pkgs) openssh;
  
    cfg = config.services.sshd;
  
negative.code: 
        UsePAM yes
  
        ${ concatMapStrings (port : ''Port ${toString port}
                                             '') cfg.ports}
  
        ${if cfg.forwardX11 then "
  