anchor.diff:                else "Missing boot.loader.grub.device setting for hostname \"${hostname}\"";
         };
   
  -        services.nixosManual.enable = true;
  +      services.nixosManual.enable = true;
   
   
   #FIXME: vim indenting for .nix
  
positive.code: #    subversion
  #    surfraw
  #    sweethome3d.application
      taskwarrior  # causes grep help text to be printed each time a new terminal is started (bash completion script is buggy)
      tcpdump
      #teamviewer  # changes hash all the time
  #    telnet
  #    tig
      traceroute
  #    tree
  #    unoconv
  #    unrar #XXX: unfree license!
      unzip
  #    vifm
  #    vim_configurable
  #    virtmanager
  #    virtviewer
      vlc
  #    weston
      wget
      wgetpaste
      which
  #    wineUnstable
  #    winpdb
      wireshark
  #    wpa_supplicant
  #    wpa_supplicant_gui
  #    w3m
  #    xchat
      youtube-dl
  
        ];
  
  # List services that you want to enable:
  #virtualisation.virtualbox.guest.enable = true; #already in hardware*nix
        boot.initrd.checkJournalingFS = false;
        boot.initrd.supportedFilesystems = [
        "btrfs"
        ];
        boot.tmpOnTmpfs = true; #/tmp is on tmpfs ? yes!
  
        boot.kernel.sysctl = {
  
  # TCP SYN Flood Protection
  #src: https://www.ndchost.com/wiki/server-administration/hardening-tcpip-syn-flood
  "net.ipv4.tcp_syncookies" = 1;
  "net.ipv4.tcp_max_syn_backlog" = 2048;
  "net.ipv4.tcp_synack_retries" = 3;
  
        # Disables packet forwarding
  "net.ipv4.ip_forward" = 0;
  # Disables IP dynaddr
  #net.ipv4.ip_dynaddr = 0
  # Disable ECN
  #net.ipv4.tcp_ecn = 0
  # Enables source route verification
  "net.ipv4.conf.default.rp_filter" = 1;
  # Enable reverse path
  "net.ipv4.conf.all.rp_filter" = 1;
  
  # Enable SYN cookies (yum!)
  # http://cr.yp.to/syncookies.html
  
negative.code:         hostName = hostname;
          firewall.enable = true;
          firewall.allowPing = false; #ipv6 ping is always allowed, src: https://nixos.org/releases/nixos/unstable/nixos-16.09pre79453.32b7b00/manual/index.html#sec-firewall
            networkmanager.enable = false;
          enableWLAN = false;
          enableIPv6 = false;
          wireless.enable = false;
  