anchor.diff:      ####################################################
       # UPSTREAM Configuration
       upstream = mkOption {
  -      type = types.commas;
  +      type = with types; coercedTo string (x: [x]) (listOf string);
  +      default = [];
         description = ''
           The http url(s) of the upstream endpoint or <literal>file://</literal>
           paths for static files. Routing is based on the path.
  
positive.code:       '';
      };
  
    };
  
    config = mkIf cfg.enable {
  
      users.extraUsers.oauth2_proxy = {
        description = "OAuth2 Proxy";
  
negative.code:       inherit (cfg.github) org team;
      }; };
  
      google = cfg: { google = with cfg.google; optionalAttrs (groups != []) {
        admin-email = adminEmail;
        service-account = serviceAccountJSON;
        group = groups;
  