anchor.diff:          '';
           ExecReload = "${pkgs.util-linux}/bin/kill -HUP $MAINPID";
           Restart = "on-failure";
  +        UMask = "0077";
         };
       };
     };
  
positive.code:         User = "matrix-synapse";
          Group = "matrix-synapse";
          WorkingDirectory = cfg.dataDir;
          ExecStart = ''
            ${cfg.package}/bin/homeserver \
              ${ concatMapStringsSep "\n  " (x: "--config-path ${x} \\") ([ configFile ] ++ cfg.extraConfigFiles) }
  
negative.code:     ];
  
      users.users.matrix-synapse = {
        group = "matrix-synapse";
        home = cfg.dataDir;
        createHome = true;
        shell = "${pkgs.bash}/bin/bash";
        uid = config.ids.uids.matrix-synapse;
      };
  
      users.groups.matrix-synapse = {
        gid = config.ids.gids.matrix-synapse;
  