anchor.diff:    config = mkIf cfg.enable {
       environment.systemPackages = [ pkgs.glusterfs ];
   
  -    services.rpcbind.enable = true;
  +    services.rpcbind.enable = cfg.useRpcbind;
   
       environment.etc = mkIf (cfg.tlsSettings != null) {
         "ssl/glusterfs.pem".source = cfg.tlsSettings.tlsPem;
  
positive.code:       };
      };
  
      systemd.services.glustereventsd = {
        inherit restartTriggers;
  
        description = "Gluster Events Notifier";
  
negative.code:         type = types.enum ["DEBUG" "INFO" "WARNING" "ERROR" "CRITICAL" "TRACE" "NONE"];
          description = "Log level used by the GlusterFS daemon";
          default = "INFO";
        };
  
        useRpcbind = mkOption {
          type = types.bool;
          description = ''
            Enable use of rpcbind. This is required for Gluster's NFS functionality.
  
            You may want to turn it off to reduce the attack surface for DDoS reflection attacks.
  
            See https://davelozier.com/glusterfs-and-rpcbind-portmap-ddos-reflection-attacks/
            and https://bugzilla.redhat.com/show_bug.cgi?id=1426842 for details.
          '';
          default = true;
        };
  
        enableGlustereventsd = mkOption {
          type = types.bool;
          description = "Whether to enable the GlusterFS Events Daemon";
          default = true;
        };
  
        extraFlags = mkOption {
  