anchor.diff:  | Name                        | Default   | Description
   | `server`                    |           | Server provisioning URL. If empty, set to `tls.server`.
   | `primary_ecu_hardware_id`   |           | The hardware ID of the primary ECU (e.g., `"raspberry-pi"`). If left empty, the hostname of the device will be used.
  -| `provision_path`            |           | Path to an archive containing provisioning data. See link:credentials.adoc[] for the specification of the contents of this file.
  +| `provision_path`            |           | Path to an archive containing provisioning data. See link:{aktualizr-github-url}/docs/credentials.adoc[] for the specification of the contents of this file.
   | `p12_password`              |           | Password for PKCS#12 encryption.
   | `expiry_days`               | `"36000"` | Provided in the `ttl` field of the device provisioning request sent to the server.
   | `device_id`                 |           | Device ID of the primary ECU. If left empty, a random name will be generated.
  
positive.code: 
  == `telemetry`
  
  Options for configuration how aktualizr communicates with the server.
  
  [options="header"]
  |==========================================================================================
  
negative.code: | `repo_server`             |              | Image repository server URL. If empty, set to `tls.server` with `/repo` appended.
  | `key_source`              | `"file"`     | Where to read the device's private key from. Options: `"file"`, `"pkcs11"`.
  | `key_type`                | `"RSA2048"`  | Type of cryptographic keys to use. Options: `"ED25519"`, `"RSA2048"`, `"RSA3072"` or `"RSA4096"`.
  | `legacy_interface`        |              | Path to an executable interface for communicating with legacy secondary ECUs. See link:{aktualizr-github-url}/docs/legacysecondary.adoc[] for more information.
  |==========================================================================================
  
  == `discovery`
  