anchor.diff:                <literal>DynamicUser=true</literal>.
               '';
             };
  +
  +          options.log = {
  +            enable = mkEnableOption "logging for spacecookie"
  +              // { default = true; example = false; };
  +
  +            hide-ips = mkOption {
  +              type = types.bool;
  +              default = true;
  +              description = ''
  +                If enabled, spacecookie will hide personal
  +                information of users like IP addresses from
  +                log output.
  +              '';
  +            };
  +
  +            hide-time = mkOption {
  +              type = types.bool;
  +              # since we are starting with systemd anyways
  +              # we deviate from the default behavior here:
  +              # journald will add timestamps, so no need
  +              # to double up.
  +              default = true;
  +              description = ''
  +                If enabled, spacecookie will not print timestamps
  +                at the beginning of every log line.
  +              '';
  +            };
  +
  +            level = mkOption {
  +              type = types.enum [
  +                "info"
  +                "warn"
  +                "error"
  +              ];
  +              default = "info";
  +              description = ''
  +                Log level for the spacecookie service.
  +              '';
  +            };
  +          };
           };
   
           description = ''
             Settings for spacecookie. The settings set here are
             directly translated to the spacecookie JSON config
  -          file. See the
  -          <link xlink:href="https://github.com/sternenseemann/spacecookie/#configuration">spacecookie documentation</link>
  +          file. See
  +          <link xlink:href="https://sternenseemann.github.io/spacecookie/spacecookie.json.5.html">spacecookie.json(5)</link>
             for explanations of all options.
           '';
         };
  
positive.code:         '';
        }
        {
          assertion = !(cfg.settings ? port);
          message = ''
            The NixOS spacecookie module uses socket activation,
            so the port option has no effect. Use the port option
            in services.spacecookie instead.
          '';
        }
      ];
  
negative.code:   cfg = config.services.spacecookie;
  
    spacecookieConfig = {
      listen = {
        inherit (cfg) port;
      };
    } // cfg.settings;
  
    format = pkgs.formats.json {};
  