anchor.diff:      secret=$(cat "${keyOptions.keyFile}")
       dest="${stateDir}/private/${keyName}"
       echo "  secret: \"$secret\"" > "$dest"
  -    ${pkgs.coreutils}/bin/chown ${username}:${username} "$dest"
  -    ${pkgs.coreutils}/bin/chmod 0400 "$dest"
  +    chown ${username}:${username} "$dest"
  +    chmod 0400 "$dest"
     '') cfg.keys);
   
   
  
positive.code:       ipv4-edns-size:      ${toString cfg.ipv4EDNSSize}
        do-ip6:              ${yesOrNo  cfg.ipv6}
        ipv6-edns-size:      ${toString cfg.ipv6EDNSSize}
        log-time-asci:       ${yesOrNo  cfg.logTimeAscii}
        ${maybeString "nsid: " cfg.nsid}
        port:                ${toString cfg.port}
        reuseport:           ${yesOrNo  cfg.reuseport}
  
negative.code:       server-key-file:   "${cfg.remoteControl.serverKeyFile}"
        server-cert-file:  "${cfg.remoteControl.serverCertFile}"
  
      ${concatStrings (mapAttrsToList zoneConfigFile zoneConfigs)}
  
      ${cfg.extraConfig}
  