---
Function {
 argument: None,
 arguments: FunctionArguments {
  arguments: [
   FunctionArgument {
    identifier: "pkgs",
    default: None,
   },
   FunctionArgument {
    identifier: "lib",
    default: None,
   },
   FunctionArgument {
    identifier: "config",
    default: None,
   },
  ],
  ellipsis: true,
 },
 definition: With {
  expression: Variable {
   identifier: "lib",
   position: (3, 6),
  },
  target: LetIn {
   bindings: [
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "name",
        position: (7, 3),
       },
      ],
     },
     String {
      parts: [
       Raw {
        content: "maddy",
        position: (7, 11),
       },
      ],
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "cfg",
        position: (9, 3),
       },
      ],
     },
     PropertyAccess {
      expression: Variable {
       identifier: "config",
       position: (9, 9),
      },
      attribute_path: AttributePath {
       attributes: [
        Raw {
         content: "services",
         position: (9, 16),
        },
        Raw {
         content: "maddy",
         position: (9, 25),
        },
       ],
      },
      default: None,
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "defaultConfig",
        position: (11, 3),
       },
      ],
     },
     String {
      parts: [
       Raw {
        content: "# Minimal configuration with TLS disabled, adapted from upstream example\n# configuration here https://github.com/foxcpp/maddy/blob/master/maddy.conf\n# Do not use this in production!\n\ntls off\n\nauth.pass_table local_authdb {\n  table sql_table {\n    driver sqlite3\n    dsn credentials.db\n    table_name passwords\n  }\n}\n\nstorage.imapsql local_mailboxes {\n  driver sqlite3\n  dsn imapsql.db\n}\n\ntable.chain local_rewrites {\n  optional_step regexp \"(.+)\\+(.+)@(.+)\" \"$1@$3\"\n  optional_step static {\n    entry postmaster postmaster@$(primary_domain)\n  }\n  optional_step file /etc/maddy/aliases\n}\nmsgpipeline local_routing {\n  destination postmaster $(local_domains) {\n    modify {\n      replace_rcpt &local_rewrites\n    }\n    deliver_to &local_mailboxes\n  }\n  default_destination {\n    reject 550 5.1.1 \"User doesn't exist\"\n  }\n}\n\nsmtp tcp://0.0.0.0:25 {\n  limits {\n    all rate 20 1s\n    all concurrency 10\n  }\n  dmarc yes\n  check {\n    require_mx_record\n    dkim\n    spf\n  }\n  source $(local_domains) {\n    reject 501 5.1.8 \"Use Submission for outgoing SMTP\"\n  }\n  default_source {\n    destination postmaster $(local_domains) {\n      deliver_to &local_routing\n    }\n    default_destination {\n      reject 550 5.1.1 \"User doesn't exist\"\n    }\n  }\n}\n\nsubmission tcp://0.0.0.0:587 {\n  limits {\n    all rate 50 1s\n  }\n  auth &local_authdb\n  source $(local_domains) {\n    check {\n        authorize_sender {\n            prepare_email &local_rewrites\n            user_to_email identity\n        }\n    }\n    destination postmaster $(local_domains) {\n        deliver_to &local_routing\n    }\n    default_destination {\n        modify {\n            dkim $(primary_domain) $(local_domains) default\n        }\n        deliver_to &remote_queue\n    }\n  }\n  default_source {\n    reject 501 5.1.8 \"Non-local sender domain\"\n  }\n}\n\ntarget.remote outbound_delivery {\n  limits {\n    destination rate 20 1s\n    destination concurrency 10\n  }\n  mx_auth {\n    dane\n    mtasts {\n      cache fs\n      fs_dir mtasts_cache/\n    }\n    local_policy {\n        min_tls_level encrypted\n        min_mx_level none\n    }\n  }\n}\n\ntarget.queue remote_queue {\n  target &outbound_delivery\n  autogenerated_msg_domain $(primary_domain)\n  bounce {\n    destination postmaster $(local_domains) {\n      deliver_to &local_routing\n    }\n    default_destination {\n        reject 550 5.0.0 \"Refusing to send DSNs to non-local addresses\"\n    }\n  }\n}\n\nimap tcp://0.0.0.0:143 {\n  auth &local_authdb\n  storage &local_mailboxes\n}\n",
        position: (12, 1),
       },
      ],
     },
    ),
   ],
   target: Map {
    bindings: [
     KeyValue(
      AttributePath {
       attributes: [
        Raw {
         content: "options",
         position: (139, 3),
        },
       ],
      },
      Map {
       bindings: [
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "services",
            position: (140, 5),
           },
           Raw {
            content: "maddy",
            position: (140, 14),
           },
          ],
         },
         Map {
          bindings: [
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "enable",
               position: (142, 7),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkEnableOption",
              position: (142, 16),
             },
             arguments: [
              String {
               parts: [
                Raw {
                 content: "Maddy, a free an open source mail server",
                 position: (142, 32),
                },
               ],
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "user",
               position: (144, 7),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (144, 14),
             },
             arguments: [
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "default",
                    position: (145, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "maddy",
                    position: (145, 20),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "type",
                    position: (146, 9),
                   },
                  ],
                 },
                 With {
                  expression: Variable {
                   identifier: "types",
                   position: (146, 21),
                  },
                  target: FunctionApplication {
                   function: Variable {
                    identifier: "uniq",
                    position: (146, 28),
                   },
                   arguments: [
                    Variable {
                     identifier: "string",
                     position: (146, 33),
                    },
                   ],
                  },
                  position: (146, 16),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "description",
                    position: (147, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "User account under which maddy runs.\n\n<note><para>\nIf left as the default value this user will automatically be created\non system activation, otherwise the sysadmin is responsible for\nensuring the user exists before the maddy service starts.\n</para></note>\n",
                    position: (148, 1),
                   },
                  ],
                 },
                ),
               ],
               recursive: false,
               position: (144, 23),
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "group",
               position: (158, 7),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (158, 15),
             },
             arguments: [
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "default",
                    position: (159, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "maddy",
                    position: (159, 20),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "type",
                    position: (160, 9),
                   },
                  ],
                 },
                 With {
                  expression: Variable {
                   identifier: "types",
                   position: (160, 21),
                  },
                  target: FunctionApplication {
                   function: Variable {
                    identifier: "uniq",
                    position: (160, 28),
                   },
                   arguments: [
                    Variable {
                     identifier: "string",
                     position: (160, 33),
                    },
                   ],
                  },
                  position: (160, 16),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "description",
                    position: (161, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "Group account under which maddy runs.\n\n<note><para>\nIf left as the default value this group will automatically be created\non system activation, otherwise the sysadmin is responsible for\nensuring the group exists before the maddy service starts.\n</para></note>\n",
                    position: (162, 1),
                   },
                  ],
                 },
                ),
               ],
               recursive: false,
               position: (158, 24),
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "hostname",
               position: (172, 7),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (172, 18),
             },
             arguments: [
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "default",
                    position: (173, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "localhost",
                    position: (173, 20),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "type",
                    position: (174, 9),
                   },
                  ],
                 },
                 With {
                  expression: Variable {
                   identifier: "types",
                   position: (174, 21),
                  },
                  target: FunctionApplication {
                   function: Variable {
                    identifier: "uniq",
                    position: (174, 28),
                   },
                   arguments: [
                    Variable {
                     identifier: "string",
                     position: (174, 33),
                    },
                   ],
                  },
                  position: (174, 16),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "example",
                    position: (175, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "example.com",
                    position: (175, 21),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "description",
                    position: (176, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "Hostname to use. It should be FQDN.\n",
                    position: (177, 1),
                   },
                  ],
                 },
                ),
               ],
               recursive: false,
               position: (172, 27),
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "primaryDomain",
               position: (181, 7),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (181, 23),
             },
             arguments: [
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "default",
                    position: (182, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "localhost",
                    position: (182, 20),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "type",
                    position: (183, 9),
                   },
                  ],
                 },
                 With {
                  expression: Variable {
                   identifier: "types",
                   position: (183, 21),
                  },
                  target: FunctionApplication {
                   function: Variable {
                    identifier: "uniq",
                    position: (183, 28),
                   },
                   arguments: [
                    Variable {
                     identifier: "string",
                     position: (183, 33),
                    },
                   ],
                  },
                  position: (183, 16),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "example",
                    position: (184, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "mail.example.com",
                    position: (184, 21),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "description",
                    position: (185, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "Primary MX domain to use. It should be FQDN.\n",
                    position: (186, 1),
                   },
                  ],
                 },
                ),
               ],
               recursive: false,
               position: (181, 32),
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "localDomains",
               position: (190, 7),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (190, 22),
             },
             arguments: [
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "type",
                    position: (191, 9),
                   },
                  ],
                 },
                 With {
                  expression: Variable {
                   identifier: "types",
                   position: (191, 21),
                  },
                  target: FunctionApplication {
                   function: Variable {
                    identifier: "listOf",
                    position: (191, 28),
                   },
                   arguments: [
                    Variable {
                     identifier: "str",
                     position: (191, 35),
                    },
                   ],
                  },
                  position: (191, 16),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "default",
                    position: (192, 9),
                   },
                  ],
                 },
                 List {
                  elements: [
                   String {
                    parts: [
                     Raw {
                      content: "$(primary_domain)",
                      position: (192, 21),
                     },
                    ],
                   },
                  ],
                  position: (192, 19),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "example",
                    position: (193, 9),
                   },
                  ],
                 },
                 List {
                  elements: [
                   String {
                    parts: [
                     Raw {
                      content: "$(primary_domain)",
                      position: (194, 12),
                     },
                    ],
                   },
                   String {
                    parts: [
                     Raw {
                      content: "example.com",
                      position: (195, 12),
                     },
                    ],
                   },
                   String {
                    parts: [
                     Raw {
                      content: "other.example.com",
                      position: (196, 12),
                     },
                    ],
                   },
                  ],
                  position: (193, 19),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "description",
                    position: (198, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "Define list of allowed domains.\n",
                    position: (199, 1),
                   },
                  ],
                 },
                ),
               ],
               recursive: false,
               position: (190, 31),
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "config",
               position: (203, 7),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (203, 16),
             },
             arguments: [
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "type",
                    position: (204, 9),
                   },
                  ],
                 },
                 With {
                  expression: Variable {
                   identifier: "types",
                   position: (204, 21),
                  },
                  target: FunctionApplication {
                   function: Variable {
                    identifier: "nullOr",
                    position: (204, 28),
                   },
                   arguments: [
                    Variable {
                     identifier: "lines",
                     position: (204, 35),
                    },
                   ],
                  },
                  position: (204, 16),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "default",
                    position: (205, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "defaultConfig",
                  position: (205, 19),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "description",
                    position: (206, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "Server configuration, see\n<link xlink:href=\"https://maddy.email\">https://maddy.email</link> for\nmore information. The default configuration of this module will setup\nminimal maddy instance for mail transfer without TLS encryption.\n<note><para>\nThis should not be used in a production environment.\n</para></note>\n",
                    position: (207, 1),
                   },
                  ],
                 },
                ),
               ],
               recursive: false,
               position: (203, 25),
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "openFirewall",
               position: (217, 7),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (217, 22),
             },
             arguments: [
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "type",
                    position: (218, 9),
                   },
                  ],
                 },
                 PropertyAccess {
                  expression: Variable {
                   identifier: "types",
                   position: (218, 16),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "bool",
                     position: (218, 22),
                    },
                   ],
                  },
                  default: None,
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "default",
                    position: (219, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "false",
                  position: (219, 19),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "description",
                    position: (220, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "Open the configured incoming and outgoing mail server ports.\n",
                    position: (221, 1),
                   },
                  ],
                 },
                ),
               ],
               recursive: false,
               position: (217, 31),
              },
             ],
            },
           ),
          ],
          recursive: false,
          position: (140, 22),
         },
        ),
       ],
       recursive: false,
       position: (139, 13),
      },
     ),
     KeyValue(
      AttributePath {
       attributes: [
        Raw {
         content: "config",
         position: (228, 3),
        },
       ],
      },
      FunctionApplication {
       function: Variable {
        identifier: "mkIf",
        position: (228, 12),
       },
       arguments: [
        PropertyAccess {
         expression: Variable {
          identifier: "cfg",
          position: (228, 17),
         },
         attribute_path: AttributePath {
          attributes: [
           Raw {
            content: "enable",
            position: (228, 21),
           },
          ],
         },
         default: None,
        },
        Map {
         bindings: [
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "systemd",
              position: (230, 5),
             },
            ],
           },
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "packages",
                 position: (231, 7),
                },
               ],
              },
              List {
               elements: [
                PropertyAccess {
                 expression: Variable {
                  identifier: "pkgs",
                  position: (231, 20),
                 },
                 attribute_path: AttributePath {
                  attributes: [
                   Raw {
                    content: "maddy",
                    position: (231, 25),
                   },
                  ],
                 },
                 default: None,
                },
               ],
               position: (231, 18),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "services",
                 position: (232, 7),
                },
                Raw {
                 content: "maddy",
                 position: (232, 16),
                },
               ],
              },
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "serviceConfig",
                    position: (233, 9),
                   },
                  ],
                 },
                 Map {
                  bindings: [
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "User",
                       position: (234, 11),
                      },
                     ],
                    },
                    PropertyAccess {
                     expression: Variable {
                      identifier: "cfg",
                      position: (234, 18),
                     },
                     attribute_path: AttributePath {
                      attributes: [
                       Raw {
                        content: "user",
                        position: (234, 22),
                       },
                      ],
                     },
                     default: None,
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "Group",
                       position: (235, 11),
                      },
                     ],
                    },
                    PropertyAccess {
                     expression: Variable {
                      identifier: "cfg",
                      position: (235, 19),
                     },
                     attribute_path: AttributePath {
                      attributes: [
                       Raw {
                        content: "group",
                        position: (235, 23),
                       },
                      ],
                     },
                     default: None,
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "StateDirectory",
                       position: (236, 11),
                      },
                     ],
                    },
                    List {
                     elements: [
                      String {
                       parts: [
                        Raw {
                         content: "maddy",
                         position: (236, 31),
                        },
                       ],
                      },
                     ],
                     position: (236, 28),
                    },
                   ),
                  ],
                  recursive: false,
                  position: (233, 25),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "restartTriggers",
                    position: (238, 9),
                   },
                  ],
                 },
                 List {
                  elements: [
                   PropertyAccess {
                    expression: Variable {
                     identifier: "config",
                     position: (238, 29),
                    },
                    attribute_path: AttributePath {
                     attributes: [
                      Raw {
                       content: "environment",
                       position: (238, 36),
                      },
                      Raw {
                       content: "etc",
                       position: (238, 48),
                      },
                      Expression {
                       expression: String {
                        parts: [
                         Raw {
                          content: "maddy/maddy.conf",
                          position: (238, 53),
                         },
                        ],
                       },
                      },
                      Raw {
                       content: "source",
                       position: (238, 71),
                      },
                     ],
                    },
                    default: None,
                   },
                  ],
                  position: (238, 27),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "wantedBy",
                    position: (239, 9),
                   },
                  ],
                 },
                 List {
                  elements: [
                   String {
                    parts: [
                     Raw {
                      content: "multi-user.target",
                      position: (239, 23),
                     },
                    ],
                   },
                  ],
                  position: (239, 20),
                 },
                ),
               ],
               recursive: false,
               position: (232, 24),
              },
             ),
            ],
            recursive: false,
            position: (230, 15),
           },
          ),
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "environment",
              position: (243, 5),
             },
             Raw {
              content: "etc",
              position: (243, 17),
             },
             Expression {
              expression: String {
               parts: [
                Raw {
                 content: "maddy/maddy.conf",
                 position: (243, 22),
                },
               ],
              },
             },
            ],
           },
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "text",
                 position: (244, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "$(hostname) = ",
                 position: (245, 1),
                },
                Expression {
                 expression: PropertyAccess {
                  expression: Variable {
                   identifier: "cfg",
                   position: (245, 25),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "hostname",
                     position: (245, 29),
                    },
                   ],
                  },
                  default: None,
                 },
                },
                Raw {
                 content: "\n$(primary_domain) = ",
                 position: (245, 38),
                },
                Expression {
                 expression: PropertyAccess {
                  expression: Variable {
                   identifier: "cfg",
                   position: (246, 31),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "primaryDomain",
                     position: (246, 35),
                    },
                   ],
                  },
                  default: None,
                 },
                },
                Raw {
                 content: "\n$(local_domains) = ",
                 position: (246, 49),
                },
                Expression {
                 expression: FunctionApplication {
                  function: Variable {
                   identifier: "toString",
                   position: (247, 30),
                  },
                  arguments: [
                   PropertyAccess {
                    expression: Variable {
                     identifier: "cfg",
                     position: (247, 39),
                    },
                    attribute_path: AttributePath {
                     attributes: [
                      Raw {
                       content: "localDomains",
                       position: (247, 43),
                      },
                     ],
                    },
                    default: None,
                   },
                  ],
                 },
                },
                Raw {
                 content: "\nhostname ",
                 position: (247, 56),
                },
                Expression {
                 expression: PropertyAccess {
                  expression: Variable {
                   identifier: "cfg",
                   position: (248, 20),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "hostname",
                     position: (248, 24),
                    },
                   ],
                  },
                  default: None,
                 },
                },
                Raw {
                 content: "\n",
                 position: (248, 33),
                },
                Expression {
                 expression: PropertyAccess {
                  expression: Variable {
                   identifier: "cfg",
                   position: (249, 11),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "config",
                     position: (249, 15),
                    },
                   ],
                  },
                  default: None,
                 },
                },
                Raw {
                 content: "\n",
                 position: (249, 22),
                },
               ],
              },
             ),
            ],
            recursive: false,
            position: (243, 42),
           },
          ),
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "users",
              position: (253, 5),
             },
             Raw {
              content: "users",
              position: (253, 11),
             },
            ],
           },
           FunctionApplication {
            function: Variable {
             identifier: "optionalAttrs",
             position: (253, 19),
            },
            arguments: [
             BinaryOperation {
              operator: EqualTo,
              operands: [
               PropertyAccess {
                expression: Variable {
                 identifier: "cfg",
                 position: (253, 34),
                },
                attribute_path: AttributePath {
                 attributes: [
                  Raw {
                   content: "user",
                   position: (253, 38),
                  },
                 ],
                },
                default: None,
               },
               Variable {
                identifier: "name",
                position: (253, 46),
               },
              ],
              position: (253, 43),
             },
             Map {
              bindings: [
               KeyValue(
                AttributePath {
                 attributes: [
                  Expression {
                   expression: Variable {
                    identifier: "name",
                    position: (254, 9),
                   },
                  },
                 ],
                },
                Map {
                 bindings: [
                  KeyValue(
                   AttributePath {
                    attributes: [
                     Raw {
                      content: "isSystemUser",
                      position: (255, 9),
                     },
                    ],
                   },
                   Variable {
                    identifier: "true",
                    position: (255, 24),
                   },
                  ),
                  KeyValue(
                   AttributePath {
                    attributes: [
                     Raw {
                      content: "group",
                      position: (256, 9),
                     },
                    ],
                   },
                   PropertyAccess {
                    expression: Variable {
                     identifier: "cfg",
                     position: (256, 17),
                    },
                    attribute_path: AttributePath {
                     attributes: [
                      Raw {
                       content: "group",
                       position: (256, 21),
                      },
                     ],
                    },
                    default: None,
                   },
                  ),
                  KeyValue(
                   AttributePath {
                    attributes: [
                     Raw {
                      content: "description",
                      position: (257, 9),
                     },
                    ],
                   },
                   String {
                    parts: [
                     Raw {
                      content: "Maddy mail transfer agent user",
                      position: (257, 24),
                     },
                    ],
                   },
                  ),
                 ],
                 recursive: false,
                 position: (254, 17),
                },
               ),
              ],
              recursive: false,
              position: (253, 52),
             },
            ],
           },
          ),
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "users",
              position: (261, 5),
             },
             Raw {
              content: "groups",
              position: (261, 11),
             },
            ],
           },
           FunctionApplication {
            function: Variable {
             identifier: "optionalAttrs",
             position: (261, 20),
            },
            arguments: [
             BinaryOperation {
              operator: EqualTo,
              operands: [
               PropertyAccess {
                expression: Variable {
                 identifier: "cfg",
                 position: (261, 35),
                },
                attribute_path: AttributePath {
                 attributes: [
                  Raw {
                   content: "group",
                   position: (261, 39),
                  },
                 ],
                },
                default: None,
               },
               Variable {
                identifier: "name",
                position: (261, 48),
               },
              ],
              position: (261, 45),
             },
             Map {
              bindings: [
               KeyValue(
                AttributePath {
                 attributes: [
                  Expression {
                   expression: PropertyAccess {
                    expression: Variable {
                     identifier: "cfg",
                     position: (262, 9),
                    },
                    attribute_path: AttributePath {
                     attributes: [
                      Raw {
                       content: "group",
                       position: (262, 13),
                      },
                     ],
                    },
                    default: None,
                   },
                  },
                 ],
                },
                Map {
                 bindings: [],
                 recursive: false,
                 position: (262, 22),
                },
               ),
              ],
              recursive: false,
              position: (261, 54),
             },
            ],
           },
          ),
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "networking",
              position: (265, 5),
             },
             Raw {
              content: "firewall",
              position: (265, 16),
             },
            ],
           },
           FunctionApplication {
            function: Variable {
             identifier: "mkIf",
             position: (265, 27),
            },
            arguments: [
             PropertyAccess {
              expression: Variable {
               identifier: "cfg",
               position: (265, 32),
              },
              attribute_path: AttributePath {
               attributes: [
                Raw {
                 content: "openFirewall",
                 position: (265, 36),
                },
               ],
              },
              default: None,
             },
             Map {
              bindings: [
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "allowedTCPPorts",
                   position: (266, 7),
                  },
                 ],
                },
                List {
                 elements: [
                  Int {
                   value: 25,
                   position: (266, 27),
                  },
                  Int {
                   value: 143,
                   position: (266, 30),
                  },
                  Int {
                   value: 587,
                   position: (266, 34),
                  },
                 ],
                 position: (266, 25),
                },
               ),
              ],
              recursive: false,
              position: (265, 49),
             },
            ],
           },
          ),
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "environment",
              position: (269, 5),
             },
             Raw {
              content: "systemPackages",
              position: (269, 17),
             },
            ],
           },
           List {
            elements: [
             PropertyAccess {
              expression: Variable {
               identifier: "pkgs",
               position: (270, 7),
              },
              attribute_path: AttributePath {
               attributes: [
                Raw {
                 content: "maddy",
                 position: (270, 12),
                },
               ],
              },
              default: None,
             },
            ],
            position: (269, 34),
           },
          ),
         ],
         recursive: false,
         position: (228, 28),
        },
       ],
      },
     ),
    ],
    recursive: false,
    position: (138, 4),
   },
   position: (5, 1),
  },
  position: (3, 1),
 },
 position: (1, 1),
}