anchor.diff:  
       users.extraGroups.nylon.gid = config.ids.gids.nylon;
   
  -    systemd.services.nylon = {
  -      description = "Nylon, a lightweight SOCKS proxy server";
  -      after = [ "network.target" ];
  -      wantedBy = [ "multi-user.target" ];
  -      serviceConfig =
  -      {
  -        User = "nylon";
  -        Group = "nylon";
  -        WorkingDirectory = homeDir;
  -        ExecStart = "${pkgs.nylon}/bin/nylon -f -c ${configFile}";
  -      };
  -    };
  +    systemd.services = fold (a: b: a // b) {} nylonUnits;
  +
     };
   }
  
positive.code:         description = ''
            Enables nylon as a running service upon activation.
          '';
        };
  
        nrConnections = mkOption {
  
negative.code:     Deny-IP=${concatStringsSep " " cfg.deniedIPRanges}
    '';
  
    nylonOpts = { name, config, ... }: {
  
      options = {
  
        enable = mkOption {
          type = types.bool;
  