anchor.diff:        length u.openssh.authorizedKeys.keys != 0 || length u.openssh.authorizedKeys.keyFiles != 0
       ));
     in listToAttrs (map mkAuthKeyFile usersWithKeys);
  -
  -  supportOldHostKeys = !versionAtLeast config.system.stateVersion "15.07";
   
   in
   
  
positive.code:         default =
            [ { type = "rsa"; bits = 4096; path = "/etc/ssh/ssh_host_rsa_key"; }
              { type = "ed25519"; path = "/etc/ssh/ssh_host_ed25519_key"; }
            ] ++ optionals supportOldHostKeys
            [ { type = "dsa"; path = "/etc/ssh/ssh_host_dsa_key"; }
              { type = "ecdsa"; bits = 521; path = "/etc/ssh/ssh_host_ecdsa_key"; }
            ];
          description = ''
            NixOS can automatically generate SSH host keys.  This option
  
negative.code:           HostKey ${k.path}
          '')}
  
        '';
  
      assertions = [{ assertion = if cfg.forwardX11 then cfgc.setXAuthLocation else true;
  