anchor.diff:            ${cfg.telemetryConfig}
           }
         ''}
  +    ${cfg.extraConfig}
     '';
   in
  +
   {
     options = {
  +    services.vault = {
  +      enable = mkEnableOption "Vault daemon";
   
  -    services.vault = {
  -
  -      enable = mkEnableOption "Vault daemon";
  +      package = mkOption {
  +        type = types.package;
  +        default = pkgs.vault;
  +        defaultText = "pkgs.vault";
  +        description = "This option specifies the vault package to use.";
  +      };
   
         address = mkOption {
           type = types.str;
  
positive.code:         User = "vault";
          Group = "vault";
          PermissionsStartOnly = true;
          ExecStart = "${pkgs.vault}/bin/vault server -config ${configFile}";
          PrivateDevices = true;
          PrivateTmp = true;
          ProtectSystem = "full";
  
negative.code:         type = types.lines;
          default = "";
          description = "Telemetry configuration";
        };
  
        extraConfig = mkOption {
          type = types.lines;
          default = "";
          description = "Extra text appended to <filename>vault.hcl</filename>.";
        };
      };
    };
  