anchor.diff:        preStart =
           ''
           mkdir -p ${cfg.stateDir}/logs
  +        chmod 700 ${cfg.stateDir}
           chown -R ${cfg.user}:${cfg.group} ${cfg.stateDir}
           '';
         serviceConfig = {
  
positive.code: 
      users.extraUsers = optionalAttrs (cfg.user == "nginx") (singleton
        { name = "nginx";
          group = "nginx";
          uid = config.ids.uids.nginx;
        });
  
  
negative.code:   };
  
    config = mkIf cfg.enable {
      # TODO: test user supplied config file pases syntax test
  
      systemd.services.nginx = {
  