---
Function {
 argument: None,
 arguments: FunctionArguments {
  arguments: [
   FunctionArgument {
    identifier: "pkgs",
    default: None,
   },
   FunctionArgument {
    identifier: "lib",
    default: None,
   },
   FunctionArgument {
    identifier: "config",
    default: None,
   },
  ],
  ellipsis: true,
 },
 definition: With {
  expression: Variable {
   identifier: "lib",
   position: (3, 6),
  },
  target: LetIn {
   bindings: [
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "cfg",
        position: (6, 3),
       },
      ],
     },
     PropertyAccess {
      expression: Variable {
       identifier: "config",
       position: (6, 9),
      },
      attribute_path: AttributePath {
       attributes: [
        Raw {
         content: "services",
         position: (6, 16),
        },
        Raw {
         content: "pinnwand",
         position: (6, 25),
        },
       ],
      },
      default: None,
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "format",
        position: (8, 3),
       },
      ],
     },
     FunctionApplication {
      function: PropertyAccess {
       expression: Variable {
        identifier: "pkgs",
        position: (8, 12),
       },
       attribute_path: AttributePath {
        attributes: [
         Raw {
          content: "formats",
          position: (8, 17),
         },
         Raw {
          content: "toml",
          position: (8, 25),
         },
        ],
       },
       default: None,
      },
      arguments: [
       Map {
        bindings: [],
        recursive: false,
        position: (8, 30),
       },
      ],
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "configFile",
        position: (9, 3),
       },
      ],
     },
     FunctionApplication {
      function: PropertyAccess {
       expression: Variable {
        identifier: "format",
        position: (9, 16),
       },
       attribute_path: AttributePath {
        attributes: [
         Raw {
          content: "generate",
          position: (9, 23),
         },
        ],
       },
       default: None,
      },
      arguments: [
       String {
        parts: [
         Raw {
          content: "pinnwand.toml",
          position: (9, 33),
         },
        ],
       },
       PropertyAccess {
        expression: Variable {
         identifier: "cfg",
         position: (9, 48),
        },
        attribute_path: AttributePath {
         attributes: [
          Raw {
           content: "settings",
           position: (9, 52),
          },
         ],
        },
        default: None,
       },
      ],
     },
    ),
   ],
   target: Map {
    bindings: [
     KeyValue(
      AttributePath {
       attributes: [
        Raw {
         content: "options",
         position: (12, 3),
        },
        Raw {
         content: "services",
         position: (12, 11),
        },
        Raw {
         content: "pinnwand",
         position: (12, 20),
        },
       ],
      },
      Map {
       bindings: [
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "enable",
            position: (13, 5),
           },
          ],
         },
         FunctionApplication {
          function: Variable {
           identifier: "mkEnableOption",
           position: (13, 14),
          },
          arguments: [
           String {
            parts: [
             Raw {
              content: "Pinnwand",
              position: (13, 30),
             },
            ],
           },
          ],
         },
        ),
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "port",
            position: (15, 5),
           },
          ],
         },
         FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (15, 12),
          },
          arguments: [
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "type",
                 position: (16, 7),
                },
               ],
              },
              PropertyAccess {
               expression: Variable {
                identifier: "types",
                position: (16, 14),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "port",
                  position: (16, 20),
                 },
                ],
               },
               default: None,
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "description",
                 position: (17, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "The port to listen on.",
                 position: (17, 22),
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "default",
                 position: (18, 7),
                },
               ],
              },
              Int {
               value: 8000,
               position: (18, 17),
              },
             ),
            ],
            recursive: false,
            position: (15, 21),
           },
          ],
         },
        ),
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "settings",
            position: (21, 5),
           },
          ],
         },
         FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (21, 16),
          },
          arguments: [
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "type",
                 position: (22, 7),
                },
               ],
              },
              PropertyAccess {
               expression: Variable {
                identifier: "format",
                position: (22, 14),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "type",
                  position: (22, 21),
                 },
                ],
               },
               default: None,
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "description",
                 position: (23, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "Your <filename>pinnwand.toml</filename> as a Nix attribute set. Look up\npossible options in the <link xlink:href=\"https://github.com/supakeen/pinnwand/blob/master/pinnwand.toml-example\">pinnwand.toml-example</link>.\n",
                 position: (24, 1),
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "default",
                 position: (27, 7),
                },
               ],
              },
              Map {
               bindings: [],
               recursive: false,
               position: (27, 17),
              },
             ),
            ],
            recursive: false,
            position: (21, 25),
           },
          ],
         },
        ),
       ],
       recursive: false,
       position: (12, 31),
      },
     ),
     KeyValue(
      AttributePath {
       attributes: [
        Raw {
         content: "config",
         position: (31, 3),
        },
       ],
      },
      FunctionApplication {
       function: Variable {
        identifier: "mkIf",
        position: (31, 12),
       },
       arguments: [
        PropertyAccess {
         expression: Variable {
          identifier: "cfg",
          position: (31, 17),
         },
         attribute_path: AttributePath {
          attributes: [
           Raw {
            content: "enable",
            position: (31, 21),
           },
          ],
         },
         default: None,
        },
        Map {
         bindings: [
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "services",
              position: (32, 5),
             },
             Raw {
              content: "pinnwand",
              position: (32, 14),
             },
             Raw {
              content: "settings",
              position: (32, 23),
             },
            ],
           },
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "database_uri",
                 position: (33, 7),
                },
               ],
              },
              FunctionApplication {
               function: Variable {
                identifier: "mkDefault",
                position: (33, 22),
               },
               arguments: [
                String {
                 parts: [
                  Raw {
                   content: "sqlite:////var/lib/pinnwand/pinnwand.db",
                   position: (33, 33),
                  },
                 ],
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "paste_size",
                 position: (34, 7),
                },
               ],
              },
              FunctionApplication {
               function: Variable {
                identifier: "mkDefault",
                position: (34, 20),
               },
               arguments: [
                Int {
                 value: 262144,
                 position: (34, 30),
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "paste_help",
                 position: (35, 7),
                },
               ],
              },
              FunctionApplication {
               function: Variable {
                identifier: "mkDefault",
                position: (35, 20),
               },
               arguments: [
                String {
                 parts: [
                  Raw {
                   content: "<p>Welcome to pinnwand, this site is a pastebin. It allows you to share code with others. If you write code in the text area below and press the paste button you will be given a link you can share with others so they can view your code as well.</p><p>People with the link can view your pasted code, only you can remove your paste and it expires automatically. Note that anyone could guess the URI to your paste so don't rely on it being private.</p>\n",
                   position: (36, 1),
                  },
                 ],
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "footer",
                 position: (38, 7),
                },
               ],
              },
              FunctionApplication {
               function: Variable {
                identifier: "mkDefault",
                position: (38, 16),
               },
               arguments: [
                String {
                 parts: [
                  Raw {
                   content: "View <a href=\"//github.com/supakeen/pinnwand\" target=\"_BLANK\">source code</a>, the <a href=\"/removal\">removal</a> or <a href=\"/expiry\">expiry</a> stories, or read the <a href=\"/about\">about</a> page.\n",
                   position: (39, 1),
                  },
                 ],
                },
               ],
              },
             ),
            ],
            recursive: false,
            position: (32, 34),
           },
          ),
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "systemd",
              position: (43, 5),
             },
             Raw {
              content: "services",
              position: (43, 13),
             },
            ],
           },
           LetIn {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "hardeningOptions",
                 position: (44, 7),
                },
               ],
              },
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "User",
                    position: (45, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "pinnwand",
                    position: (45, 17),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "DynamicUser",
                    position: (46, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (46, 23),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "StateDirectory",
                    position: (48, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "pinnwand",
                    position: (48, 27),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "StateDirectoryMode",
                    position: (49, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "0700",
                    position: (49, 31),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "AmbientCapabilities",
                    position: (51, 9),
                   },
                  ],
                 },
                 List {
                  elements: [],
                  position: (51, 31),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "CapabilityBoundingSet",
                    position: (52, 9),
                   },
                  ],
                 },
                 String {
                  parts: [],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "DevicePolicy",
                    position: (53, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "closed",
                    position: (53, 25),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "LockPersonality",
                    position: (54, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (54, 27),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "MemoryDenyWriteExecute",
                    position: (55, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (55, 34),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "PrivateDevices",
                    position: (56, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (56, 26),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "PrivateUsers",
                    position: (57, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (57, 24),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProcSubset",
                    position: (58, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "pid",
                    position: (58, 23),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectClock",
                    position: (59, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (59, 24),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectControlGroups",
                    position: (60, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (60, 32),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectHome",
                    position: (61, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (61, 23),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectHostname",
                    position: (62, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (62, 27),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectKernelLogs",
                    position: (63, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (63, 29),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectKernelModules",
                    position: (64, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (64, 32),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectKernelTunables",
                    position: (65, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (65, 33),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectProc",
                    position: (66, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "invisible",
                    position: (66, 24),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "RestrictAddressFamilies",
                    position: (67, 9),
                   },
                  ],
                 },
                 List {
                  elements: [
                   String {
                    parts: [
                     Raw {
                      content: "AF_UNIX",
                      position: (68, 12),
                     },
                    ],
                   },
                   String {
                    parts: [
                     Raw {
                      content: "AF_INET",
                      position: (69, 12),
                     },
                    ],
                   },
                   String {
                    parts: [
                     Raw {
                      content: "AF_INET6",
                      position: (70, 12),
                     },
                    ],
                   },
                  ],
                  position: (67, 35),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "RestrictNamespaces",
                    position: (72, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (72, 30),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "RestrictRealtime",
                    position: (73, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (73, 28),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "SystemCallArchitectures",
                    position: (74, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "native",
                    position: (74, 36),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "SystemCallFilter",
                    position: (75, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "@system-service",
                    position: (75, 29),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "UMask",
                    position: (76, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "0077",
                    position: (76, 18),
                   },
                  ],
                 },
                ),
               ],
               recursive: false,
               position: (44, 26),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "command",
                 position: (79, 7),
                },
               ],
              },
              String {
               parts: [
                Expression {
                 expression: PropertyAccess {
                  expression: Variable {
                   identifier: "pkgs",
                   position: (79, 20),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "pinnwand",
                     position: (79, 25),
                    },
                   ],
                  },
                  default: None,
                 },
                },
                Raw {
                 content: "/bin/pinnwand --configuration-path ",
                 position: (79, 34),
                },
                Expression {
                 expression: Variable {
                  identifier: "configFile",
                  position: (79, 71),
                 },
                },
               ],
              },
             ),
            ],
            target: Map {
             bindings: [
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "pinnwand",
                  position: (81, 7),
                 },
                ],
               },
               Map {
                bindings: [
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "description",
                     position: (82, 9),
                    },
                   ],
                  },
                  String {
                   parts: [
                    Raw {
                     content: "Pinnwannd HTTP Server",
                     position: (82, 24),
                    },
                   ],
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "after",
                     position: (83, 9),
                    },
                   ],
                  },
                  List {
                   elements: [
                    String {
                     parts: [
                      Raw {
                       content: "network.target",
                       position: (83, 20),
                      },
                     ],
                    },
                   ],
                   position: (83, 17),
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "wantedBy",
                     position: (84, 9),
                    },
                   ],
                  },
                  List {
                   elements: [
                    String {
                     parts: [
                      Raw {
                       content: "multi-user.target",
                       position: (84, 23),
                      },
                     ],
                    },
                   ],
                   position: (84, 20),
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "unitConfig",
                     position: (86, 9),
                    },
                    Raw {
                     content: "Documentation",
                     position: (86, 20),
                    },
                   ],
                  },
                  String {
                   parts: [
                    Raw {
                     content: "https://pinnwand.readthedocs.io/en/latest/",
                     position: (86, 37),
                    },
                   ],
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "serviceConfig",
                     position: (88, 9),
                    },
                   ],
                  },
                  BinaryOperation {
                   operator: Update,
                   operands: [
                    Map {
                     bindings: [
                      KeyValue(
                       AttributePath {
                        attributes: [
                         Raw {
                          content: "ExecStart",
                          position: (89, 11),
                         },
                        ],
                       },
                       String {
                        parts: [
                         Expression {
                          expression: Variable {
                           identifier: "command",
                           position: (89, 26),
                          },
                         },
                         Raw {
                          content: " http --port ",
                          position: (89, 34),
                         },
                         Expression {
                          expression: FunctionApplication {
                           function: Variable {
                            identifier: "toString",
                            position: (89, 49),
                           },
                           arguments: [
                            PropertyAccess {
                             expression: Variable {
                              identifier: "cfg",
                              position: (89, 58),
                             },
                             attribute_path: AttributePath {
                              attributes: [
                               Raw {
                                content: "port",
                                position: (89, 62),
                               },
                              ],
                             },
                             default: None,
                            },
                           ],
                          },
                         },
                        ],
                       },
                      ),
                     ],
                     recursive: false,
                     position: (88, 25),
                    },
                    Variable {
                     identifier: "hardeningOptions",
                     position: (90, 14),
                    },
                   ],
                   position: (90, 11),
                  },
                 ),
                ],
                recursive: false,
                position: (81, 18),
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "pinnwand-reaper",
                  position: (93, 7),
                 },
                ],
               },
               Map {
                bindings: [
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "description",
                     position: (94, 9),
                    },
                   ],
                  },
                  String {
                   parts: [
                    Raw {
                     content: "Pinnwand Reaper",
                     position: (94, 24),
                    },
                   ],
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "startAt",
                     position: (95, 9),
                    },
                   ],
                  },
                  String {
                   parts: [
                    Raw {
                     content: "daily",
                     position: (95, 20),
                    },
                   ],
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "serviceConfig",
                     position: (97, 9),
                    },
                   ],
                  },
                  BinaryOperation {
                   operator: Update,
                   operands: [
                    Map {
                     bindings: [
                      KeyValue(
                       AttributePath {
                        attributes: [
                         Raw {
                          content: "ExecStart",
                          position: (98, 11),
                         },
                        ],
                       },
                       String {
                        parts: [
                         Expression {
                          expression: Variable {
                           identifier: "command",
                           position: (98, 26),
                          },
                         },
                         Raw {
                          content: " -vvvv reap",
                          position: (98, 34),
                         },
                        ],
                       },
                      ),
                     ],
                     recursive: false,
                     position: (97, 25),
                    },
                    Variable {
                     identifier: "hardeningOptions",
                     position: (99, 14),
                    },
                   ],
                   position: (99, 11),
                  },
                 ),
                ],
                recursive: false,
                position: (93, 25),
               },
              ),
             ],
             recursive: false,
             position: (80, 8),
            },
            position: (43, 24),
           },
          ),
         ],
         recursive: false,
         position: (31, 28),
        },
       ],
      },
     ),
    ],
    recursive: false,
    position: (11, 1),
   },
   position: (5, 1),
  },
  position: (3, 1),
 },
 position: (1, 1),
}