anchor.diff:              unixSocket = mkOption {
                 type = with types; nullOr path;
                 default = "/run/${redisName name}/redis.sock";
  -              defaultText = "\"/run/redis/redis.sock\" or \"/run/redis-\${name}/redis.sock\" if name != \"\"";
  +              defaultText = literalExpression ''
  +                if name == "" then "/run/redis/redis.sock" else "/run/redis-''${name}/redis.sock"
  +              '';
                 description = "The path to the socket to bind to.";
               };
   
  
positive.code:             user = mkOption {
                type = types.str;
                default = redisName name;
                defaultText = "\"redis\" or \"redis-\${name}\" if name != \"\"";
                description = "The username and groupname for redis-server.";
              };
  
  
negative.code:         ProtectKernelTunables = true;
          ProtectControlGroups = true;
          RestrictAddressFamilies =
            optionals (conf.port != 0) ["AF_INET" "AF_INET6"] ++
            optional (conf.unixSocket != null) "AF_UNIX";
          RestrictNamespaces = true;
          LockPersonality = true;
  