anchor.diff:      audiences = ${removeSuffix "/" cfg.publicUrl}
     '';
   
  +  user = "syncserver";
  +  group = "syncserver";
   in
   
   {
  
positive.code:       '';
      };
  
      users.users.syncserver = {
        group = "syncserver";
        isSystemUser = true;
      };
  
      users.groups.syncserver = {};
    };
  }
  
negative.code: 
    config = mkIf cfg.enable {
  
      systemd.services.syncserver = {
        after = [ "network.target" ];
        description = "Firefox Sync Server";
        wantedBy = [ "multi-user.target" ];
  