anchor.diff:        wantedBy = [ "multi-user.target" ];
         after = [ "network.target" ];
         serviceConfig = {
  -        ExecStart = "${pkgs.diod}/sbin/diod -c ${diodConfig}";
  +        ExecStart = "${pkgs.diod}/sbin/diod -f -c ${diodConfig}";
  +        Capabilities = "cap_net_bind_service+=ep";
         };
       };
     };
  
positive.code: 
        listen = mkOption {
          type = types.listOf types.str;
          default = [ ];
          description = ''
            [ "IP:PORT" [,"IP:PORT",...] ]
            List the interfaces and ports that diod should listen on.
  
negative.code:       };
  
        exports = mkOption {
          type = types.listOf types.str;
          default = [];
          description = ''
            List the file systems that clients will be allowed to mount. All paths should
  