---
Function {
 argument: None,
 arguments: FunctionArguments {
  arguments: [
   FunctionArgument {
    identifier: "lib",
    default: None,
   },
   FunctionArgument {
    identifier: "pkgs",
    default: None,
   },
   FunctionArgument {
    identifier: "config",
    default: None,
   },
  ],
  ellipsis: true,
 },
 definition: With {
  expression: Variable {
   identifier: "lib",
   position: (2, 6),
  },
  target: LetIn {
   bindings: [
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "cfg",
        position: (4, 3),
       },
      ],
     },
     PropertyAccess {
      expression: Variable {
       identifier: "config",
       position: (4, 9),
      },
      attribute_path: AttributePath {
       attributes: [
        Raw {
         content: "services",
         position: (4, 16),
        },
        Raw {
         content: "github-runner",
         position: (4, 25),
        },
       ],
      },
      default: None,
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "svcName",
        position: (5, 3),
       },
      ],
     },
     String {
      parts: [
       Raw {
        content: "github-runner",
        position: (5, 14),
       },
      ],
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "systemdDir",
        position: (6, 3),
       },
      ],
     },
     String {
      parts: [
       Expression {
        expression: Variable {
         identifier: "svcName",
         position: (6, 19),
        },
       },
       Raw {
        content: "/",
        position: (6, 27),
       },
       Expression {
        expression: PropertyAccess {
         expression: Variable {
          identifier: "cfg",
          position: (6, 30),
         },
         attribute_path: AttributePath {
          attributes: [
           Raw {
            content: "name",
            position: (6, 34),
           },
          ],
         },
         default: None,
        },
       },
      ],
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "runtimeDir",
        position: (8, 3),
       },
      ],
     },
     String {
      parts: [
       Raw {
        content: "%t/",
        position: (8, 17),
       },
       Expression {
        expression: Variable {
         identifier: "systemdDir",
         position: (8, 22),
        },
       },
      ],
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "stateDir",
        position: (10, 3),
       },
      ],
     },
     String {
      parts: [
       Raw {
        content: "%S/",
        position: (10, 15),
       },
       Expression {
        expression: Variable {
         identifier: "systemdDir",
         position: (10, 20),
        },
       },
      ],
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "logsDir",
        position: (12, 3),
       },
      ],
     },
     String {
      parts: [
       Raw {
        content: "%L/",
        position: (12, 14),
       },
       Expression {
        expression: Variable {
         identifier: "systemdDir",
         position: (12, 19),
        },
       },
      ],
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "currentConfigTokenFilename",
        position: (14, 3),
       },
      ],
     },
     String {
      parts: [
       Raw {
        content: ".current-token",
        position: (14, 33),
       },
      ],
     },
    ),
   ],
   target: Map {
    bindings: [
     KeyValue(
      AttributePath {
       attributes: [
        Raw {
         content: "options",
         position: (17, 3),
        },
        Raw {
         content: "services",
         position: (17, 11),
        },
        Raw {
         content: "github-runner",
         position: (17, 20),
        },
       ],
      },
      Map {
       bindings: [
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "enable",
            position: (18, 5),
           },
          ],
         },
         FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (18, 14),
          },
          arguments: [
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "default",
                 position: (19, 7),
                },
               ],
              },
              Variable {
               identifier: "false",
               position: (19, 17),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "example",
                 position: (20, 7),
                },
               ],
              },
              Variable {
               identifier: "true",
               position: (20, 17),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "description",
                 position: (21, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "Whether to enable GitHub Actions runner.\n\nNote: GitHub recommends using self-hosted runners with private repositories only. Learn more here:\n<link xlink:href=\"https://docs.github.com/en/actions/hosting-your-own-runners/about-self-hosted-runners\"\n>About self-hosted runners</link>.\n",
                 position: (22, 1),
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "type",
                 position: (28, 7),
                },
               ],
              },
              PropertyAccess {
               expression: Variable {
                identifier: "lib",
                position: (28, 14),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "types",
                  position: (28, 18),
                 },
                 Raw {
                  content: "bool",
                  position: (28, 24),
                 },
                ],
               },
               default: None,
              },
             ),
            ],
            recursive: false,
            position: (18, 23),
           },
          ],
         },
        ),
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "url",
            position: (31, 5),
           },
          ],
         },
         FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (31, 11),
          },
          arguments: [
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "type",
                 position: (32, 7),
                },
               ],
              },
              PropertyAccess {
               expression: Variable {
                identifier: "types",
                position: (32, 14),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "str",
                  position: (32, 20),
                 },
                ],
               },
               default: None,
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "description",
                 position: (33, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "Repository to add the runner to.\n\nChanging this option triggers a new runner registration.\n",
                 position: (34, 1),
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "example",
                 position: (38, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "https://github.com/nixos/nixpkgs",
                 position: (38, 18),
                },
               ],
              },
             ),
            ],
            recursive: false,
            position: (31, 20),
           },
          ],
         },
        ),
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "tokenFile",
            position: (41, 5),
           },
          ],
         },
         FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (41, 17),
          },
          arguments: [
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "type",
                 position: (42, 7),
                },
               ],
              },
              PropertyAccess {
               expression: Variable {
                identifier: "types",
                position: (42, 14),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "path",
                  position: (42, 20),
                 },
                ],
               },
               default: None,
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "description",
                 position: (43, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "The full path to a file which contains the runner registration token.\nThe file should contain exactly one line with the token without any newline.\nThe token can be used to re-register a runner of the same name but is time-limited.\n\nChanging this option or the file's content triggers a new runner registration.\n",
                 position: (44, 1),
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "example",
                 position: (50, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "/run/secrets/github-runner/nixos.token",
                 position: (50, 18),
                },
               ],
              },
             ),
            ],
            recursive: false,
            position: (41, 26),
           },
          ],
         },
        ),
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "name",
            position: (53, 5),
           },
          ],
         },
         FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (53, 12),
          },
          arguments: [
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "type",
                 position: (55, 7),
                },
               ],
              },
              FunctionApplication {
               function: PropertyAccess {
                expression: Variable {
                 identifier: "types",
                 position: (55, 14),
                },
                attribute_path: AttributePath {
                 attributes: [
                  Raw {
                   content: "strMatching",
                   position: (55, 20),
                  },
                 ],
                },
                default: None,
               },
               arguments: [
                String {
                 parts: [
                  Raw {
                   content: "^$|^[[:alnum:]]([[:alnum:]_-]{0,61}[[:alnum:]])?$",
                   position: (55, 33),
                  },
                 ],
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "description",
                 position: (56, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "Name of the runner to configure. Defaults to the hostname.\n\nChanging this option triggers a new runner registration.\n",
                 position: (57, 1),
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "example",
                 position: (61, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "nixos",
                 position: (61, 18),
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "default",
                 position: (62, 7),
                },
               ],
              },
              PropertyAccess {
               expression: Variable {
                identifier: "config",
                position: (62, 17),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "networking",
                  position: (62, 24),
                 },
                 Raw {
                  content: "hostName",
                  position: (62, 35),
                 },
                ],
               },
               default: None,
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "defaultText",
                 position: (63, 7),
                },
               ],
              },
              FunctionApplication {
               function: Variable {
                identifier: "literalExpression",
                position: (63, 21),
               },
               arguments: [
                String {
                 parts: [
                  Raw {
                   content: "config.networking.hostName",
                   position: (63, 40),
                  },
                 ],
                },
               ],
              },
             ),
            ],
            recursive: false,
            position: (53, 21),
           },
          ],
         },
        ),
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "runnerGroup",
            position: (66, 5),
           },
          ],
         },
         FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (66, 19),
          },
          arguments: [
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "type",
                 position: (67, 7),
                },
               ],
              },
              FunctionApplication {
               function: PropertyAccess {
                expression: Variable {
                 identifier: "types",
                 position: (67, 14),
                },
                attribute_path: AttributePath {
                 attributes: [
                  Raw {
                   content: "nullOr",
                   position: (67, 20),
                  },
                 ],
                },
                default: None,
               },
               arguments: [
                PropertyAccess {
                 expression: Variable {
                  identifier: "types",
                  position: (67, 27),
                 },
                 attribute_path: AttributePath {
                  attributes: [
                   Raw {
                    content: "str",
                    position: (67, 33),
                   },
                  ],
                 },
                 default: None,
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "description",
                 position: (68, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "Name of the runner group to add this runner to (defaults to the default runner group).\n\nChanging this option triggers a new runner registration.\n",
                 position: (69, 1),
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "default",
                 position: (73, 7),
                },
               ],
              },
              Variable {
               identifier: "null",
               position: (73, 17),
              },
             ),
            ],
            recursive: false,
            position: (66, 28),
           },
          ],
         },
        ),
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "extraLabels",
            position: (76, 5),
           },
          ],
         },
         FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (76, 19),
          },
          arguments: [
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "type",
                 position: (77, 7),
                },
               ],
              },
              FunctionApplication {
               function: PropertyAccess {
                expression: Variable {
                 identifier: "types",
                 position: (77, 14),
                },
                attribute_path: AttributePath {
                 attributes: [
                  Raw {
                   content: "listOf",
                   position: (77, 20),
                  },
                 ],
                },
                default: None,
               },
               arguments: [
                PropertyAccess {
                 expression: Variable {
                  identifier: "types",
                  position: (77, 27),
                 },
                 attribute_path: AttributePath {
                  attributes: [
                   Raw {
                    content: "str",
                    position: (77, 33),
                   },
                  ],
                 },
                 default: None,
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "description",
                 position: (78, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "Extra labels in addition to the default (<literal>[\"self-hosted\", \"Linux\", \"X64\"]</literal>).\n\nChanging this option triggers a new runner registration.\n",
                 position: (79, 1),
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "example",
                 position: (83, 7),
                },
               ],
              },
              FunctionApplication {
               function: Variable {
                identifier: "literalExpression",
                position: (83, 17),
               },
               arguments: [
                String {
                 parts: [
                  Raw {
                   content: "[ \"nixos\" ]",
                   position: (83, 37),
                  },
                 ],
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "default",
                 position: (84, 7),
                },
               ],
              },
              List {
               elements: [],
               position: (84, 17),
              },
             ),
            ],
            recursive: false,
            position: (76, 28),
           },
          ],
         },
        ),
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "replace",
            position: (87, 5),
           },
          ],
         },
         FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (87, 15),
          },
          arguments: [
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "type",
                 position: (88, 7),
                },
               ],
              },
              PropertyAccess {
               expression: Variable {
                identifier: "types",
                position: (88, 14),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "bool",
                  position: (88, 20),
                 },
                ],
               },
               default: None,
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "description",
                 position: (89, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "Replace any existing runner with the same name.\n\nWithout this flag, registering a new runner with the same name fails.\n",
                 position: (90, 1),
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "default",
                 position: (94, 7),
                },
               ],
              },
              Variable {
               identifier: "false",
               position: (94, 17),
              },
             ),
            ],
            recursive: false,
            position: (87, 24),
           },
          ],
         },
        ),
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "extraPackages",
            position: (97, 5),
           },
          ],
         },
         FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (97, 21),
          },
          arguments: [
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "type",
                 position: (98, 7),
                },
               ],
              },
              FunctionApplication {
               function: PropertyAccess {
                expression: Variable {
                 identifier: "types",
                 position: (98, 14),
                },
                attribute_path: AttributePath {
                 attributes: [
                  Raw {
                   content: "listOf",
                   position: (98, 20),
                  },
                 ],
                },
                default: None,
               },
               arguments: [
                PropertyAccess {
                 expression: Variable {
                  identifier: "types",
                  position: (98, 27),
                 },
                 attribute_path: AttributePath {
                  attributes: [
                   Raw {
                    content: "package",
                    position: (98, 33),
                   },
                  ],
                 },
                 default: None,
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "description",
                 position: (99, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "Extra packages to add to <literal>PATH</literal> of the service to make them available to workflows.\n",
                 position: (100, 1),
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "default",
                 position: (102, 7),
                },
               ],
              },
              List {
               elements: [],
               position: (102, 17),
              },
             ),
            ],
            recursive: false,
            position: (97, 30),
           },
          ],
         },
        ),
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "package",
            position: (105, 5),
           },
          ],
         },
         FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (105, 15),
          },
          arguments: [
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "type",
                 position: (106, 7),
                },
               ],
              },
              PropertyAccess {
               expression: Variable {
                identifier: "types",
                position: (106, 14),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "package",
                  position: (106, 20),
                 },
                ],
               },
               default: None,
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "description",
                 position: (107, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "Which github-runner derivation to use.\n",
                 position: (108, 1),
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "default",
                 position: (110, 7),
                },
               ],
              },
              PropertyAccess {
               expression: Variable {
                identifier: "pkgs",
                position: (110, 17),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "github-runner",
                  position: (110, 22),
                 },
                ],
               },
               default: None,
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "defaultText",
                 position: (111, 7),
                },
               ],
              },
              FunctionApplication {
               function: Variable {
                identifier: "literalExpression",
                position: (111, 21),
               },
               arguments: [
                String {
                 parts: [
                  Raw {
                   content: "pkgs.github-runner",
                   position: (111, 40),
                  },
                 ],
                },
               ],
              },
             ),
            ],
            recursive: false,
            position: (105, 24),
           },
          ],
         },
        ),
       ],
       recursive: false,
       position: (17, 36),
      },
     ),
     KeyValue(
      AttributePath {
       attributes: [
        Raw {
         content: "config",
         position: (115, 3),
        },
       ],
      },
      FunctionApplication {
       function: Variable {
        identifier: "mkIf",
        position: (115, 12),
       },
       arguments: [
        PropertyAccess {
         expression: Variable {
          identifier: "cfg",
          position: (115, 17),
         },
         attribute_path: AttributePath {
          attributes: [
           Raw {
            content: "enable",
            position: (115, 21),
           },
          ],
         },
         default: None,
        },
        Map {
         bindings: [
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "warnings",
              position: (116, 5),
             },
            ],
           },
           FunctionApplication {
            function: Variable {
             identifier: "optionals",
             position: (116, 16),
            },
            arguments: [
             FunctionApplication {
              function: Variable {
               identifier: "isStorePath",
               position: (116, 27),
              },
              arguments: [
               PropertyAccess {
                expression: Variable {
                 identifier: "cfg",
                 position: (116, 39),
                },
                attribute_path: AttributePath {
                 attributes: [
                  Raw {
                   content: "tokenFile",
                   position: (116, 43),
                  },
                 ],
                },
                default: None,
               },
              ],
             },
             List {
              elements: [
               String {
                parts: [
                 Raw {
                  content: "`services.github-runner.tokenFile` points to the Nix store and, therefore, is world-readable.\nConsider using a path outside of the Nix store to keep the token private.\n",
                  position: (118, 1),
                 },
                ],
               },
              ],
              position: (116, 54),
             },
            ],
           },
          ),
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "systemd",
              position: (123, 5),
             },
             Raw {
              content: "services",
              position: (123, 13),
             },
             Expression {
              expression: Variable {
               identifier: "svcName",
               position: (123, 24),
              },
             },
            ],
           },
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "description",
                 position: (124, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "GitHub Actions runner",
                 position: (124, 22),
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "wantedBy",
                 position: (126, 7),
                },
               ],
              },
              List {
               elements: [
                String {
                 parts: [
                  Raw {
                   content: "multi-user.target",
                   position: (126, 21),
                  },
                 ],
                },
               ],
               position: (126, 18),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "wants",
                 position: (127, 7),
                },
               ],
              },
              List {
               elements: [
                String {
                 parts: [
                  Raw {
                   content: "network-online.target",
                   position: (127, 18),
                  },
                 ],
                },
               ],
               position: (127, 15),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "after",
                 position: (128, 7),
                },
               ],
              },
              List {
               elements: [
                String {
                 parts: [
                  Raw {
                   content: "network.target",
                   position: (128, 18),
                  },
                 ],
                },
                String {
                 parts: [
                  Raw {
                   content: "network-online.target",
                   position: (128, 35),
                  },
                 ],
                },
               ],
               position: (128, 15),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "environment",
                 position: (130, 7),
                },
               ],
              },
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "HOME",
                    position: (131, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "runtimeDir",
                  position: (131, 16),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "RUNNER_ROOT",
                    position: (132, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "runtimeDir",
                  position: (132, 23),
                 },
                ),
               ],
               recursive: false,
               position: (130, 21),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "path",
                 position: (135, 7),
                },
               ],
              },
              BinaryOperation {
               operator: Concatenation,
               operands: [
                With {
                 expression: Variable {
                  identifier: "pkgs",
                  position: (135, 20),
                 },
                 target: List {
                  elements: [
                   Variable {
                    identifier: "bash",
                    position: (136, 9),
                   },
                   Variable {
                    identifier: "coreutils",
                    position: (137, 9),
                   },
                   Variable {
                    identifier: "git",
                    position: (138, 9),
                   },
                   Variable {
                    identifier: "gnutar",
                    position: (139, 9),
                   },
                   Variable {
                    identifier: "gzip",
                    position: (140, 9),
                   },
                  ],
                  position: (135, 26),
                 },
                 position: (135, 15),
                },
                BinaryOperation {
                 operator: Concatenation,
                 operands: [
                  List {
                   elements: [
                    PropertyAccess {
                     expression: Variable {
                      identifier: "config",
                      position: (142, 9),
                     },
                     attribute_path: AttributePath {
                      attributes: [
                       Raw {
                        content: "nix",
                        position: (142, 16),
                       },
                       Raw {
                        content: "package",
                        position: (142, 20),
                       },
                      ],
                     },
                     default: None,
                    },
                   ],
                   position: (141, 13),
                  },
                  PropertyAccess {
                   expression: Variable {
                    identifier: "cfg",
                    position: (143, 12),
                   },
                   attribute_path: AttributePath {
                    attributes: [
                     Raw {
                      content: "extraPackages",
                      position: (143, 16),
                     },
                    ],
                   },
                   default: None,
                  },
                 ],
                 position: (143, 9),
                },
               ],
               position: (141, 10),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "serviceConfig",
                 position: (145, 7),
                },
               ],
              },
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ExecStart",
                    position: (146, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Expression {
                    expression: PropertyAccess {
                     expression: Variable {
                      identifier: "cfg",
                      position: (146, 24),
                     },
                     attribute_path: AttributePath {
                      attributes: [
                       Raw {
                        content: "package",
                        position: (146, 28),
                       },
                      ],
                     },
                     default: None,
                    },
                   },
                   Raw {
                    content: "/bin/runsvc.sh",
                    position: (146, 36),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ExecStartPre",
                    position: (155, 9),
                   },
                  ],
                 },
                 LetIn {
                  bindings: [
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "writeScript",
                       position: (164, 13),
                      },
                     ],
                    },
                    Function {
                     argument: Some(
                      "name",
                     ),
                     arguments: FunctionArguments {
                      arguments: [],
                      ellipsis: false,
                     },
                     definition: Function {
                      argument: Some(
                       "lines",
                      ),
                      arguments: FunctionArguments {
                       arguments: [],
                       ellipsis: false,
                      },
                      definition: FunctionApplication {
                       function: PropertyAccess {
                        expression: Variable {
                         identifier: "pkgs",
                         position: (164, 40),
                        },
                        attribute_path: AttributePath {
                         attributes: [
                          Raw {
                           content: "writeShellScript",
                           position: (164, 45),
                          },
                         ],
                        },
                        default: None,
                       },
                       arguments: [
                        String {
                         parts: [
                          Expression {
                           expression: Variable {
                            identifier: "svcName",
                            position: (164, 65),
                           },
                          },
                          Raw {
                           content: "-",
                           position: (164, 73),
                          },
                          Expression {
                           expression: Variable {
                            identifier: "name",
                            position: (164, 76),
                           },
                          },
                          Raw {
                           content: ".sh",
                           position: (164, 81),
                          },
                         ],
                        },
                        String {
                         parts: [
                          Raw {
                           content: "set -euo pipefail\n\nSTATE_DIRECTORY=\"$1\"\nRUNTIME_DIRECTORY=\"$2\"\nLOGS_DIRECTORY=\"$3\"\n\n",
                           position: (165, 1),
                          },
                          Expression {
                           expression: Variable {
                            identifier: "lines",
                            position: (171, 17),
                           },
                          },
                          Raw {
                           content: "\n",
                           position: (171, 23),
                          },
                         ],
                        },
                       ],
                      },
                      position: (164, 33),
                     },
                     position: (164, 27),
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "currentConfigPath",
                       position: (173, 13),
                      },
                     ],
                    },
                    String {
                     parts: [
                      Raw {
                       content: "$STATE_DIRECTORY/.nixos-current-config.json",
                       position: (173, 34),
                      },
                     ],
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "runnerRegistrationConfig",
                       position: (174, 13),
                      },
                     ],
                    },
                    FunctionApplication {
                     function: Variable {
                      identifier: "getAttrs",
                      position: (174, 40),
                     },
                     arguments: [
                      List {
                       elements: [
                        String {
                         parts: [
                          Raw {
                           content: "name",
                           position: (174, 52),
                          },
                         ],
                        },
                        String {
                         parts: [
                          Raw {
                           content: "tokenFile",
                           position: (174, 59),
                          },
                         ],
                        },
                        String {
                         parts: [
                          Raw {
                           content: "url",
                           position: (174, 71),
                          },
                         ],
                        },
                        String {
                         parts: [
                          Raw {
                           content: "runnerGroup",
                           position: (174, 77),
                          },
                         ],
                        },
                        String {
                         parts: [
                          Raw {
                           content: "extraLabels",
                           position: (174, 91),
                          },
                         ],
                        },
                       ],
                       position: (174, 49),
                      },
                      Variable {
                       identifier: "cfg",
                       position: (174, 106),
                      },
                     ],
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "newConfigPath",
                       position: (175, 13),
                      },
                     ],
                    },
                    FunctionApplication {
                     function: PropertyAccess {
                      expression: Variable {
                       identifier: "builtins",
                       position: (175, 29),
                      },
                      attribute_path: AttributePath {
                       attributes: [
                        Raw {
                         content: "toFile",
                         position: (175, 38),
                        },
                       ],
                      },
                      default: None,
                     },
                     arguments: [
                      String {
                       parts: [
                        Expression {
                         expression: Variable {
                          identifier: "svcName",
                          position: (175, 48),
                         },
                        },
                        Raw {
                         content: "-config.json",
                         position: (175, 56),
                        },
                       ],
                      },
                      FunctionApplication {
                       function: PropertyAccess {
                        expression: Variable {
                         identifier: "builtins",
                         position: (175, 71),
                        },
                        attribute_path: AttributePath {
                         attributes: [
                          Raw {
                           content: "toJSON",
                           position: (175, 80),
                          },
                         ],
                        },
                        default: None,
                       },
                       arguments: [
                        Variable {
                         identifier: "runnerRegistrationConfig",
                         position: (175, 87),
                        },
                       ],
                      },
                     ],
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "newConfigTokenFilename",
                       position: (176, 13),
                      },
                     ],
                    },
                    String {
                     parts: [
                      Raw {
                       content: ".new-token",
                       position: (176, 39),
                      },
                     ],
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "runnerCredFiles",
                       position: (177, 13),
                      },
                     ],
                    },
                    List {
                     elements: [
                      String {
                       parts: [
                        Raw {
                         content: ".credentials",
                         position: (178, 16),
                        },
                       ],
                      },
                      String {
                       parts: [
                        Raw {
                         content: ".credentials_rsaparams",
                         position: (179, 16),
                        },
                       ],
                      },
                      String {
                       parts: [
                        Raw {
                         content: ".runner",
                         position: (180, 16),
                        },
                       ],
                      },
                     ],
                     position: (177, 31),
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "unconfigureRunner",
                       position: (182, 13),
                      },
                     ],
                    },
                    FunctionApplication {
                     function: Variable {
                      identifier: "writeScript",
                      position: (182, 33),
                     },
                     arguments: [
                      String {
                       parts: [
                        Raw {
                         content: "unconfigure",
                         position: (182, 46),
                        },
                       ],
                      },
                      String {
                       parts: [
                        Raw {
                         content: "differs=\n# Set `differs = 1` if current and new runner config differ or if `currentConfigPath` does not exist\n",
                         position: (183, 1),
                        },
                        Expression {
                         expression: PropertyAccess {
                          expression: Variable {
                           identifier: "pkgs",
                           position: (185, 17),
                          },
                          attribute_path: AttributePath {
                           attributes: [
                            Raw {
                             content: "diffutils",
                             position: (185, 22),
                            },
                           ],
                          },
                          default: None,
                         },
                        },
                        Raw {
                         content: "/bin/diff -q ",
                         position: (185, 32),
                        },
                        Raw {
                         content: "'",
                         position: (185, 45),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "newConfigPath",
                          position: (185, 48),
                         },
                        },
                        Raw {
                         content: "' \"",
                         position: (185, 62),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "currentConfigPath",
                          position: (185, 67),
                         },
                        },
                        Raw {
                         content: "\" >/dev/null 2>&1 || differs=1\n# Also trigger a registration if the token content changed\n",
                         position: (185, 85),
                        },
                        Expression {
                         expression: PropertyAccess {
                          expression: Variable {
                           identifier: "pkgs",
                           position: (187, 17),
                          },
                          attribute_path: AttributePath {
                           attributes: [
                            Raw {
                             content: "diffutils",
                             position: (187, 22),
                            },
                           ],
                          },
                          default: None,
                         },
                        },
                        Raw {
                         content: "/bin/diff -q \\\n  \"$STATE_DIRECTORY\"/",
                         position: (187, 32),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "currentConfigTokenFilename",
                          position: (188, 38),
                         },
                        },
                        Raw {
                         content: " \\\n  ",
                         position: (188, 65),
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "escapeShellArg",
                           position: (189, 19),
                          },
                          arguments: [
                           PropertyAccess {
                            expression: Variable {
                             identifier: "cfg",
                             position: (189, 34),
                            },
                            attribute_path: AttributePath {
                             attributes: [
                              Raw {
                               content: "tokenFile",
                               position: (189, 38),
                              },
                             ],
                            },
                            default: None,
                           },
                          ],
                         },
                        },
                        Raw {
                         content: " \\\n  >/dev/null 2>&1 || differs=1\n\nif [[ -n \"$differs\" ]]; then\n  echo \"Config has changed, removing old runner state.\"\n  echo \"The old runner will still appear in the GitHub Actions UI.\" \\\n    \"You have to remove it manually.\"\n  find \"$STATE_DIRECTORY/\" -mindepth 1 -delete\n\n  # Copy the configured token file to the state dir and allow the service user to read the file\n  install --mode=666 ",
                         position: (189, 48),
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "escapeShellArg",
                           position: (199, 38),
                          },
                          arguments: [
                           PropertyAccess {
                            expression: Variable {
                             identifier: "cfg",
                             position: (199, 53),
                            },
                            attribute_path: AttributePath {
                             attributes: [
                              Raw {
                               content: "tokenFile",
                               position: (199, 57),
                              },
                             ],
                            },
                            default: None,
                           },
                          ],
                         },
                        },
                        Raw {
                         content: " \"$STATE_DIRECTORY/",
                         position: (199, 67),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "newConfigTokenFilename",
                          position: (199, 88),
                         },
                        },
                        Raw {
                         content: "\"\n  # Also copy current file to allow for a diff on the next start\n  install --mode=600 ",
                         position: (199, 111),
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "escapeShellArg",
                           position: (201, 38),
                          },
                          arguments: [
                           PropertyAccess {
                            expression: Variable {
                             identifier: "cfg",
                             position: (201, 53),
                            },
                            attribute_path: AttributePath {
                             attributes: [
                              Raw {
                               content: "tokenFile",
                               position: (201, 57),
                              },
                             ],
                            },
                            default: None,
                           },
                          ],
                         },
                        },
                        Raw {
                         content: " \"$STATE_DIRECTORY/",
                         position: (201, 67),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "currentConfigTokenFilename",
                          position: (201, 88),
                         },
                        },
                        Raw {
                         content: "\"\nfi\n",
                         position: (201, 115),
                        },
                       ],
                      },
                     ],
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "configureRunner",
                       position: (204, 13),
                      },
                     ],
                    },
                    FunctionApplication {
                     function: Variable {
                      identifier: "writeScript",
                      position: (204, 31),
                     },
                     arguments: [
                      String {
                       parts: [
                        Raw {
                         content: "configure",
                         position: (204, 44),
                        },
                       ],
                      },
                      String {
                       parts: [
                        Raw {
                         content: "if [[ -e \"$STATE_DIRECTORY/",
                         position: (205, 1),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "newConfigTokenFilename",
                          position: (205, 44),
                         },
                        },
                        Raw {
                         content: "\" ]]; then\n  echo \"Configuring GitHub Actions Runner\"\n\n  token=$(< \"$STATE_DIRECTORY\"/",
                         position: (205, 67),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "newConfigTokenFilename",
                          position: (208, 48),
                         },
                        },
                        Raw {
                         content: ")\n  RUNNER_ROOT=\"$STATE_DIRECTORY\" ",
                         position: (208, 71),
                        },
                        Expression {
                         expression: PropertyAccess {
                          expression: Variable {
                           identifier: "cfg",
                           position: (209, 50),
                          },
                          attribute_path: AttributePath {
                           attributes: [
                            Raw {
                             content: "package",
                             position: (209, 54),
                            },
                           ],
                          },
                          default: None,
                         },
                        },
                        Raw {
                         content: "/bin/config.sh \\\n    --unattended \\\n    --disableupdate \\\n    --work \"$RUNTIME_DIRECTORY\" \\\n    --url ",
                         position: (209, 62),
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "escapeShellArg",
                           position: (213, 27),
                          },
                          arguments: [
                           PropertyAccess {
                            expression: Variable {
                             identifier: "cfg",
                             position: (213, 42),
                            },
                            attribute_path: AttributePath {
                             attributes: [
                              Raw {
                               content: "url",
                               position: (213, 46),
                              },
                             ],
                            },
                            default: None,
                           },
                          ],
                         },
                        },
                        Raw {
                         content: " \\\n    --token \"$token\" \\\n    --labels ",
                         position: (213, 50),
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "escapeShellArg",
                           position: (215, 30),
                          },
                          arguments: [
                           FunctionApplication {
                            function: Variable {
                             identifier: "concatStringsSep",
                             position: (215, 46),
                            },
                            arguments: [
                             String {
                              parts: [
                               Raw {
                                content: ",",
                                position: (215, 64),
                               },
                              ],
                             },
                             PropertyAccess {
                              expression: Variable {
                               identifier: "cfg",
                               position: (215, 67),
                              },
                              attribute_path: AttributePath {
                               attributes: [
                                Raw {
                                 content: "extraLabels",
                                 position: (215, 71),
                                },
                               ],
                              },
                              default: None,
                             },
                            ],
                           },
                          ],
                         },
                        },
                        Raw {
                         content: " \\\n    --name ",
                         position: (215, 84),
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "escapeShellArg",
                           position: (216, 28),
                          },
                          arguments: [
                           PropertyAccess {
                            expression: Variable {
                             identifier: "cfg",
                             position: (216, 43),
                            },
                            attribute_path: AttributePath {
                             attributes: [
                              Raw {
                               content: "name",
                               position: (216, 47),
                              },
                             ],
                            },
                            default: None,
                           },
                          ],
                         },
                        },
                        Raw {
                         content: " \\\n    ",
                         position: (216, 52),
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "optionalString",
                           position: (217, 21),
                          },
                          arguments: [
                           PropertyAccess {
                            expression: Variable {
                             identifier: "cfg",
                             position: (217, 36),
                            },
                            attribute_path: AttributePath {
                             attributes: [
                              Raw {
                               content: "replace",
                               position: (217, 40),
                              },
                             ],
                            },
                            default: None,
                           },
                           String {
                            parts: [
                             Raw {
                              content: "--replace",
                              position: (217, 49),
                             },
                            ],
                           },
                          ],
                         },
                        },
                        Raw {
                         content: " \\\n    ",
                         position: (217, 60),
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "optionalString",
                           position: (218, 21),
                          },
                          arguments: [
                           BinaryOperation {
                            operator: NotEqualTo,
                            operands: [
                             PropertyAccess {
                              expression: Variable {
                               identifier: "cfg",
                               position: (218, 37),
                              },
                              attribute_path: AttributePath {
                               attributes: [
                                Raw {
                                 content: "runnerGroup",
                                 position: (218, 41),
                                },
                               ],
                              },
                              default: None,
                             },
                             Variable {
                              identifier: "null",
                              position: (218, 56),
                             },
                            ],
                            position: (218, 53),
                           },
                           String {
                            parts: [
                             Raw {
                              content: "--runnergroup ",
                              position: (218, 63),
                             },
                             Expression {
                              expression: FunctionApplication {
                               function: Variable {
                                identifier: "escapeShellArg",
                                position: (218, 79),
                               },
                               arguments: [
                                PropertyAccess {
                                 expression: Variable {
                                  identifier: "cfg",
                                  position: (218, 94),
                                 },
                                 attribute_path: AttributePath {
                                  attributes: [
                                   Raw {
                                    content: "runnerGroup",
                                    position: (218, 98),
                                   },
                                  ],
                                 },
                                 default: None,
                                },
                               ],
                              },
                             },
                            ],
                           },
                          ],
                         },
                        },
                        Raw {
                         content: "\n\n  # Move the automatically created _diag dir to the logs dir\n  mkdir -p  \"$STATE_DIRECTORY/_diag\"\n  cp    -r  \"$STATE_DIRECTORY/_diag/.\" \"$LOGS_DIRECTORY/\"\n  rm    -rf \"$STATE_DIRECTORY/_diag/\"\n\n  # Cleanup token from config\n  rm \"$STATE_DIRECTORY/",
                         position: (218, 112),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "newConfigTokenFilename",
                          position: (226, 40),
                         },
                        },
                        Raw {
                         content: "\"\n\n  # Symlink to new config\n  ln -s ",
                         position: (226, 63),
                        },
                        Raw {
                         content: "'",
                         position: (229, 23),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "newConfigPath",
                          position: (229, 26),
                         },
                        },
                        Raw {
                         content: "' \"",
                         position: (229, 40),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "currentConfigPath",
                          position: (229, 45),
                         },
                        },
                        Raw {
                         content: "\"\nfi\n",
                         position: (229, 63),
                        },
                       ],
                      },
                     ],
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "setupRuntimeDir",
                       position: (232, 13),
                      },
                     ],
                    },
                    FunctionApplication {
                     function: Variable {
                      identifier: "writeScript",
                      position: (232, 31),
                     },
                     arguments: [
                      String {
                       parts: [
                        Raw {
                         content: "setup-runtime-dirs",
                         position: (232, 44),
                        },
                       ],
                      },
                      String {
                       parts: [
                        Raw {
                         content: "# Link _diag dir\nln -s \"$LOGS_DIRECTORY\" \"$RUNTIME_DIRECTORY/_diag\"\n\n# Link the runner credentials to the runtime dir\nln -s \"$STATE_DIRECTORY\"/{",
                         position: (233, 1),
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: PropertyAccess {
                           expression: Variable {
                            identifier: "lib",
                            position: (237, 43),
                           },
                           attribute_path: AttributePath {
                            attributes: [
                             Raw {
                              content: "concatStringsSep",
                              position: (237, 47),
                             },
                            ],
                           },
                           default: None,
                          },
                          arguments: [
                           String {
                            parts: [
                             Raw {
                              content: ",",
                              position: (237, 65),
                             },
                            ],
                           },
                           Variable {
                            identifier: "runnerCredFiles",
                            position: (237, 68),
                           },
                          ],
                         },
                        },
                        Raw {
                         content: "} \"$RUNTIME_DIRECTORY/\"\n",
                         position: (237, 84),
                        },
                       ],
                      },
                     ],
                    },
                   ),
                  ],
                  target: FunctionApplication {
                   function: Variable {
                    identifier: "map",
                    position: (240, 11),
                   },
                   arguments: [
                    Function {
                     argument: Some(
                      "x",
                     ),
                     arguments: FunctionArguments {
                      arguments: [],
                      ellipsis: false,
                     },
                     definition: String {
                      parts: [
                       Expression {
                        expression: Variable {
                         identifier: "x",
                         position: (240, 22),
                        },
                       },
                       Raw {
                        content: " ",
                        position: (240, 24),
                       },
                       Expression {
                        expression: FunctionApplication {
                         function: Variable {
                          identifier: "escapeShellArgs",
                          position: (240, 27),
                         },
                         arguments: [
                          List {
                           elements: [
                            Variable {
                             identifier: "stateDir",
                             position: (240, 45),
                            },
                            Variable {
                             identifier: "runtimeDir",
                             position: (240, 54),
                            },
                            Variable {
                             identifier: "logsDir",
                             position: (240, 65),
                            },
                           ],
                           position: (240, 43),
                          },
                         ],
                        },
                       },
                      ],
                     },
                     position: (240, 16),
                    },
                    List {
                     elements: [
                      String {
                       parts: [
                        Raw {
                         content: "+",
                         position: (241, 14),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "unconfigureRunner",
                          position: (241, 17),
                         },
                        },
                       ],
                      },
                      Variable {
                       identifier: "configureRunner",
                       position: (242, 13),
                      },
                      Variable {
                       identifier: "setupRuntimeDir",
                       position: (243, 13),
                      },
                     ],
                     position: (240, 78),
                    },
                   ],
                  },
                  position: (156, 11),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "LogsDirectory",
                    position: (247, 9),
                   },
                  ],
                 },
                 List {
                  elements: [
                   Variable {
                    identifier: "systemdDir",
                    position: (247, 27),
                   },
                  ],
                  position: (247, 25),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "RuntimeDirectory",
                    position: (249, 9),
                   },
                  ],
                 },
                 List {
                  elements: [
                   Variable {
                    identifier: "systemdDir",
                    position: (249, 30),
                   },
                  ],
                  position: (249, 28),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "StateDirectory",
                    position: (251, 9),
                   },
                  ],
                 },
                 List {
                  elements: [
                   Variable {
                    identifier: "systemdDir",
                    position: (251, 28),
                   },
                  ],
                  position: (251, 26),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "StateDirectoryMode",
                    position: (252, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "0700",
                    position: (252, 31),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "WorkingDirectory",
                    position: (253, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "runtimeDir",
                  position: (253, 28),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "InaccessiblePaths",
                    position: (255, 9),
                   },
                  ],
                 },
                 List {
                  elements: [
                   PropertyAccess {
                    expression: Variable {
                     identifier: "cfg",
                     position: (257, 11),
                    },
                    attribute_path: AttributePath {
                     attributes: [
                      Raw {
                       content: "tokenFile",
                       position: (257, 15),
                      },
                     ],
                    },
                    default: None,
                   },
                   String {
                    parts: [
                     Expression {
                      expression: Variable {
                       identifier: "stateDir",
                       position: (259, 14),
                      },
                     },
                     Raw {
                      content: "/",
                      position: (259, 23),
                     },
                     Expression {
                      expression: Variable {
                       identifier: "currentConfigTokenFilename",
                       position: (259, 26),
                      },
                     },
                    ],
                   },
                  ],
                  position: (255, 29),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "DynamicUser",
                    position: (263, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (263, 23),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "KillMode",
                    position: (265, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "process",
                    position: (265, 21),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "KillSignal",
                    position: (266, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "SIGTERM",
                    position: (266, 23),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "AmbientCapabilities",
                    position: (271, 9),
                   },
                  ],
                 },
                 String {
                  parts: [],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "CapabilityBoundingSet",
                    position: (272, 9),
                   },
                  ],
                 },
                 String {
                  parts: [],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "DeviceAllow",
                    position: (274, 9),
                   },
                  ],
                 },
                 String {
                  parts: [],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "LockPersonality",
                    position: (275, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (275, 27),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "NoNewPrivileges",
                    position: (276, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (276, 27),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "PrivateDevices",
                    position: (277, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (277, 26),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "PrivateMounts",
                    position: (278, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (278, 25),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "PrivateTmp",
                    position: (279, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (279, 22),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "PrivateUsers",
                    position: (280, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (280, 24),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectClock",
                    position: (281, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (281, 24),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectControlGroups",
                    position: (282, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (282, 32),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectHome",
                    position: (283, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (283, 23),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectHostname",
                    position: (284, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (284, 27),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectKernelLogs",
                    position: (285, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (285, 29),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectKernelModules",
                    position: (286, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (286, 32),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectKernelTunables",
                    position: (287, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (287, 33),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectSystem",
                    position: (288, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "strict",
                    position: (288, 26),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "RemoveIPC",
                    position: (289, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (289, 21),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "RestrictNamespaces",
                    position: (290, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (290, 30),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "RestrictRealtime",
                    position: (291, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (291, 28),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "RestrictSUIDSGID",
                    position: (292, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (292, 28),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "UMask",
                    position: (293, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "0066",
                    position: (293, 18),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "PrivateNetwork",
                    position: (296, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "false",
                  position: (296, 26),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "MemoryDenyWriteExecute",
                    position: (298, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "false",
                  position: (298, 34),
                 },
                ),
               ],
               recursive: true,
               position: (145, 23),
              },
             ),
            ],
            recursive: false,
            position: (123, 35),
           },
          ),
         ],
         recursive: false,
         position: (115, 28),
        },
       ],
      },
     ),
    ],
    recursive: false,
    position: (16, 1),
   },
   position: (3, 1),
  },
  position: (2, 1),
 },
 position: (1, 1),
}