---
Function {
 argument: None,
 arguments: FunctionArguments {
  arguments: [
   FunctionArgument {
    identifier: "pkgs",
    default: None,
   },
   FunctionArgument {
    identifier: "lib",
    default: None,
   },
   FunctionArgument {
    identifier: "config",
    default: None,
   },
  ],
  ellipsis: true,
 },
 definition: With {
  expression: Variable {
   identifier: "lib",
   position: (2, 6),
  },
  target: LetIn {
   bindings: [
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "cfg",
        position: (4, 3),
       },
      ],
     },
     PropertyAccess {
      expression: Variable {
       identifier: "config",
       position: (4, 9),
      },
      attribute_path: AttributePath {
       attributes: [
        Raw {
         content: "services",
         position: (4, 16),
        },
        Raw {
         content: "sssd",
         position: (4, 25),
        },
       ],
      },
      default: None,
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "nscd",
        position: (5, 3),
       },
      ],
     },
     PropertyAccess {
      expression: Variable {
       identifier: "config",
       position: (5, 10),
      },
      attribute_path: AttributePath {
       attributes: [
        Raw {
         content: "services",
         position: (5, 17),
        },
        Raw {
         content: "nscd",
         position: (5, 26),
        },
       ],
      },
      default: None,
     },
    ),
   ],
   target: Map {
    bindings: [
     KeyValue(
      AttributePath {
       attributes: [
        Raw {
         content: "options",
         position: (7, 3),
        },
       ],
      },
      Map {
       bindings: [
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "services",
            position: (8, 5),
           },
           Raw {
            content: "sssd",
            position: (8, 14),
           },
          ],
         },
         Map {
          bindings: [
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "enable",
               position: (9, 7),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkEnableOption",
              position: (9, 16),
             },
             arguments: [
              String {
               parts: [
                Raw {
                 content: "the System Security Services Daemon",
                 position: (9, 32),
                },
               ],
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "config",
               position: (11, 7),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (11, 16),
             },
             arguments: [
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "type",
                    position: (12, 9),
                   },
                  ],
                 },
                 PropertyAccess {
                  expression: Variable {
                   identifier: "types",
                   position: (12, 16),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "lines",
                     position: (12, 22),
                    },
                   ],
                  },
                  default: None,
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "description",
                    position: (13, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "Contents of <filename>sssd.conf</filename>.",
                    position: (13, 24),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "default",
                    position: (14, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "[sssd]\nconfig_file_version = 2\nservices = nss, pam\ndomains = shadowutils\n\n[nss]\n\n[pam]\n\n[domain/shadowutils]\nid_provider = proxy\nproxy_lib_name = files\nauth_provider = proxy\nproxy_pam_target = sssd-shadowutils\nproxy_fast_alias = True\n",
                    position: (15, 1),
                   },
                  ],
                 },
                ),
               ],
               recursive: false,
               position: (11, 25),
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "sshAuthorizedKeysIntegration",
               position: (33, 7),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (33, 38),
             },
             arguments: [
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "type",
                    position: (34, 9),
                   },
                  ],
                 },
                 PropertyAccess {
                  expression: Variable {
                   identifier: "types",
                   position: (34, 16),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "bool",
                     position: (34, 22),
                    },
                   ],
                  },
                  default: None,
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "default",
                    position: (35, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "false",
                  position: (35, 19),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "description",
                    position: (36, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "Whether to make sshd look up authorized keys from SSS.\nFor this to work, the <literal>ssh</literal> SSS service must be enabled in the sssd configuration.\n",
                    position: (37, 1),
                   },
                  ],
                 },
                ),
               ],
               recursive: false,
               position: (33, 47),
              },
             ],
            },
           ),
          ],
          recursive: false,
          position: (8, 21),
         },
        ),
       ],
       recursive: false,
       position: (7, 13),
      },
     ),
     KeyValue(
      AttributePath {
       attributes: [
        Raw {
         content: "config",
         position: (43, 3),
        },
       ],
      },
      FunctionApplication {
       function: Variable {
        identifier: "mkMerge",
        position: (43, 12),
       },
       arguments: [
        List {
         elements: [
          FunctionApplication {
           function: Variable {
            identifier: "mkIf",
            position: (44, 6),
           },
           arguments: [
            PropertyAccess {
             expression: Variable {
              identifier: "cfg",
              position: (44, 11),
             },
             attribute_path: AttributePath {
              attributes: [
               Raw {
                content: "enable",
                position: (44, 15),
               },
              ],
             },
             default: None,
            },
            Map {
             bindings: [
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "systemd",
                  position: (45, 7),
                 },
                 Raw {
                  content: "services",
                  position: (45, 15),
                 },
                 Raw {
                  content: "sssd",
                  position: (45, 24),
                 },
                ],
               },
               Map {
                bindings: [
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "description",
                     position: (46, 9),
                    },
                   ],
                  },
                  String {
                   parts: [
                    Raw {
                     content: "System Security Services Daemon",
                     position: (46, 24),
                    },
                   ],
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "wantedBy",
                     position: (47, 9),
                    },
                   ],
                  },
                  List {
                   elements: [
                    String {
                     parts: [
                      Raw {
                       content: "multi-user.target",
                       position: (47, 26),
                      },
                     ],
                    },
                   ],
                   position: (47, 23),
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "before",
                     position: (48, 9),
                    },
                   ],
                  },
                  List {
                   elements: [
                    String {
                     parts: [
                      Raw {
                       content: "systemd-user-sessions.service",
                       position: (48, 21),
                      },
                     ],
                    },
                    String {
                     parts: [
                      Raw {
                       content: "nss-user-lookup.target",
                       position: (48, 53),
                      },
                     ],
                    },
                   ],
                   position: (48, 18),
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "after",
                     position: (49, 9),
                    },
                   ],
                  },
                  List {
                   elements: [
                    String {
                     parts: [
                      Raw {
                       content: "network-online.target",
                       position: (49, 20),
                      },
                     ],
                    },
                    String {
                     parts: [
                      Raw {
                       content: "nscd.service",
                       position: (49, 44),
                      },
                     ],
                    },
                   ],
                   position: (49, 17),
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "requires",
                     position: (50, 9),
                    },
                   ],
                  },
                  List {
                   elements: [
                    String {
                     parts: [
                      Raw {
                       content: "network-online.target",
                       position: (50, 23),
                      },
                     ],
                    },
                    String {
                     parts: [
                      Raw {
                       content: "nscd.service",
                       position: (50, 47),
                      },
                     ],
                    },
                   ],
                   position: (50, 20),
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "wants",
                     position: (51, 9),
                    },
                   ],
                  },
                  List {
                   elements: [
                    String {
                     parts: [
                      Raw {
                       content: "nss-user-lookup.target",
                       position: (51, 20),
                      },
                     ],
                    },
                   ],
                   position: (51, 17),
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "restartTriggers",
                     position: (52, 9),
                    },
                   ],
                  },
                  List {
                   elements: [
                    PropertyAccess {
                     expression: Variable {
                      identifier: "config",
                      position: (53, 11),
                     },
                     attribute_path: AttributePath {
                      attributes: [
                       Raw {
                        content: "environment",
                        position: (53, 18),
                       },
                       Raw {
                        content: "etc",
                        position: (53, 30),
                       },
                       Expression {
                        expression: String {
                         parts: [
                          Raw {
                           content: "nscd.conf",
                           position: (53, 35),
                          },
                         ],
                        },
                       },
                       Raw {
                        content: "source",
                        position: (53, 46),
                       },
                      ],
                     },
                     default: None,
                    },
                    PropertyAccess {
                     expression: Variable {
                      identifier: "config",
                      position: (54, 11),
                     },
                     attribute_path: AttributePath {
                      attributes: [
                       Raw {
                        content: "environment",
                        position: (54, 18),
                       },
                       Raw {
                        content: "etc",
                        position: (54, 30),
                       },
                       Expression {
                        expression: String {
                         parts: [
                          Raw {
                           content: "sssd/sssd.conf",
                           position: (54, 35),
                          },
                         ],
                        },
                       },
                       Raw {
                        content: "source",
                        position: (54, 51),
                       },
                      ],
                     },
                     default: None,
                    },
                   ],
                   position: (52, 27),
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "script",
                     position: (56, 9),
                    },
                   ],
                  },
                  String {
                   parts: [
                    Raw {
                     content: "export LDB_MODULES_PATH+=\"",
                     position: (57, 1),
                    },
                    Raw {
                     content: "$",
                     position: (57, 37),
                    },
                    Raw {
                     content: "{LDB_MODULES_PATH+:}",
                     position: (57, 40),
                    },
                    Expression {
                     expression: PropertyAccess {
                      expression: Variable {
                       identifier: "pkgs",
                       position: (57, 62),
                      },
                      attribute_path: AttributePath {
                       attributes: [
                        Raw {
                         content: "ldb",
                         position: (57, 67),
                        },
                       ],
                      },
                      default: None,
                     },
                    },
                    Raw {
                     content: "/modules/ldb:",
                     position: (57, 71),
                    },
                    Expression {
                     expression: PropertyAccess {
                      expression: Variable {
                       identifier: "pkgs",
                       position: (57, 86),
                      },
                      attribute_path: AttributePath {
                       attributes: [
                        Raw {
                         content: "sssd",
                         position: (57, 91),
                        },
                       ],
                      },
                      default: None,
                     },
                    },
                    Raw {
                     content: "/modules/ldb\"\nmkdir -p /var/lib/sss/{pubconf,db,mc,pipes,gpo_cache,secrets} /var/lib/sss/pipes/private /var/lib/sss/pubconf/krb5.include.d\n",
                     position: (57, 96),
                    },
                    Expression {
                     expression: PropertyAccess {
                      expression: Variable {
                       identifier: "pkgs",
                       position: (59, 13),
                      },
                      attribute_path: AttributePath {
                       attributes: [
                        Raw {
                         content: "sssd",
                         position: (59, 18),
                        },
                       ],
                      },
                      default: None,
                     },
                    },
                    Raw {
                     content: "/bin/sssd -D\n",
                     position: (59, 23),
                    },
                   ],
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "serviceConfig",
                     position: (61, 9),
                    },
                   ],
                  },
                  Map {
                   bindings: [
                    KeyValue(
                     AttributePath {
                      attributes: [
                       Raw {
                        content: "Type",
                        position: (62, 11),
                       },
                      ],
                     },
                     String {
                      parts: [
                       Raw {
                        content: "forking",
                        position: (62, 19),
                       },
                      ],
                     },
                    ),
                    KeyValue(
                     AttributePath {
                      attributes: [
                       Raw {
                        content: "PIDFile",
                        position: (63, 11),
                       },
                      ],
                     },
                     String {
                      parts: [
                       Raw {
                        content: "/run/sssd.pid",
                        position: (63, 22),
                       },
                      ],
                     },
                    ),
                   ],
                   recursive: false,
                   position: (61, 25),
                  },
                 ),
                ],
                recursive: false,
                position: (45, 31),
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "environment",
                  position: (67, 7),
                 },
                 Raw {
                  content: "etc",
                  position: (67, 19),
                 },
                 Expression {
                  expression: String {
                   parts: [
                    Raw {
                     content: "sssd/sssd.conf",
                     position: (67, 24),
                    },
                   ],
                  },
                 },
                ],
               },
               Map {
                bindings: [
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "text",
                     position: (68, 9),
                    },
                   ],
                  },
                  PropertyAccess {
                   expression: Variable {
                    identifier: "cfg",
                    position: (68, 16),
                   },
                   attribute_path: AttributePath {
                    attributes: [
                     Raw {
                      content: "config",
                      position: (68, 20),
                     },
                    ],
                   },
                   default: None,
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "mode",
                     position: (69, 9),
                    },
                   ],
                  },
                  String {
                   parts: [
                    Raw {
                     content: "0400",
                     position: (69, 17),
                    },
                   ],
                  },
                 ),
                ],
                recursive: false,
                position: (67, 42),
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "system",
                  position: (72, 7),
                 },
                 Raw {
                  content: "nssModules",
                  position: (72, 14),
                 },
                ],
               },
               List {
                elements: [
                 PropertyAccess {
                  expression: Variable {
                   identifier: "pkgs",
                   position: (72, 29),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "sssd",
                     position: (72, 34),
                    },
                   ],
                  },
                  default: None,
                 },
                ],
                position: (72, 27),
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "system",
                  position: (73, 7),
                 },
                 Raw {
                  content: "nssDatabases",
                  position: (73, 14),
                 },
                ],
               },
               Map {
                bindings: [
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "group",
                     position: (74, 9),
                    },
                   ],
                  },
                  List {
                   elements: [
                    String {
                     parts: [
                      Raw {
                       content: "sss",
                       position: (74, 20),
                      },
                     ],
                    },
                   ],
                   position: (74, 17),
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "passwd",
                     position: (75, 9),
                    },
                   ],
                  },
                  List {
                   elements: [
                    String {
                     parts: [
                      Raw {
                       content: "sss",
                       position: (75, 21),
                      },
                     ],
                    },
                   ],
                   position: (75, 18),
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "services",
                     position: (76, 9),
                    },
                   ],
                  },
                  List {
                   elements: [
                    String {
                     parts: [
                      Raw {
                       content: "sss",
                       position: (76, 23),
                      },
                     ],
                    },
                   ],
                   position: (76, 20),
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "shadow",
                     position: (77, 9),
                    },
                   ],
                  },
                  List {
                   elements: [
                    String {
                     parts: [
                      Raw {
                       content: "sss",
                       position: (77, 21),
                      },
                     ],
                    },
                   ],
                   position: (77, 18),
                  },
                 ),
                ],
                recursive: false,
                position: (73, 29),
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "services",
                  position: (79, 7),
                 },
                 Raw {
                  content: "dbus",
                  position: (79, 16),
                 },
                 Raw {
                  content: "packages",
                  position: (79, 21),
                 },
                ],
               },
               List {
                elements: [
                 PropertyAccess {
                  expression: Variable {
                   identifier: "pkgs",
                   position: (79, 34),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "sssd",
                     position: (79, 39),
                    },
                   ],
                  },
                  default: None,
                 },
                ],
                position: (79, 32),
               },
              ),
             ],
             recursive: false,
             position: (44, 22),
            },
           ],
          },
          FunctionApplication {
           function: Variable {
            identifier: "mkIf",
            position: (82, 6),
           },
           arguments: [
            PropertyAccess {
             expression: Variable {
              identifier: "cfg",
              position: (82, 11),
             },
             attribute_path: AttributePath {
              attributes: [
               Raw {
                content: "sshAuthorizedKeysIntegration",
                position: (82, 15),
               },
              ],
             },
             default: None,
            },
            Map {
             bindings: [
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "environment",
                  position: (85, 5),
                 },
                 Raw {
                  content: "etc",
                  position: (85, 17),
                 },
                 Expression {
                  expression: String {
                   parts: [
                    Raw {
                     content: "ssh/authorized_keys_command",
                     position: (85, 22),
                    },
                   ],
                  },
                 },
                ],
               },
               Map {
                bindings: [
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "mode",
                     position: (86, 7),
                    },
                   ],
                  },
                  String {
                   parts: [
                    Raw {
                     content: "0755",
                     position: (86, 15),
                    },
                   ],
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "text",
                     position: (87, 7),
                    },
                   ],
                  },
                  String {
                   parts: [
                    Raw {
                     content: "#!/bin/sh\nexec ",
                     position: (88, 1),
                    },
                    Expression {
                     expression: PropertyAccess {
                      expression: Variable {
                       identifier: "pkgs",
                       position: (89, 16),
                      },
                      attribute_path: AttributePath {
                       attributes: [
                        Raw {
                         content: "sssd",
                         position: (89, 21),
                        },
                       ],
                      },
                      default: None,
                     },
                    },
                    Raw {
                     content: "/bin/sss_ssh_authorizedkeys \"$@\"\n",
                     position: (89, 26),
                    },
                   ],
                  },
                 ),
                ],
                recursive: false,
                position: (85, 53),
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "services",
                  position: (92, 5),
                 },
                 Raw {
                  content: "openssh",
                  position: (92, 14),
                 },
                 Raw {
                  content: "authorizedKeysCommand",
                  position: (92, 22),
                 },
                ],
               },
               String {
                parts: [
                 Raw {
                  content: "/etc/ssh/authorized_keys_command",
                  position: (92, 47),
                 },
                ],
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "services",
                  position: (93, 5),
                 },
                 Raw {
                  content: "openssh",
                  position: (93, 14),
                 },
                 Raw {
                  content: "authorizedKeysCommandUser",
                  position: (93, 22),
                 },
                ],
               },
               String {
                parts: [
                 Raw {
                  content: "nobody",
                  position: (93, 51),
                 },
                ],
               },
              ),
             ],
             recursive: false,
             position: (82, 44),
            },
           ],
          },
         ],
         position: (43, 20),
        },
       ],
      },
     ),
     KeyValue(
      AttributePath {
       attributes: [
        Raw {
         content: "meta",
         position: (96, 3),
        },
        Raw {
         content: "maintainers",
         position: (96, 8),
        },
       ],
      },
      With {
       expression: Variable {
        identifier: "maintainers",
        position: (96, 27),
       },
       target: List {
        elements: [
         Variable {
          identifier: "bbigras",
          position: (96, 42),
         },
        ],
        position: (96, 40),
       },
       position: (96, 22),
      },
     ),
    ],
    recursive: false,
    position: (6, 4),
   },
   position: (3, 1),
  },
  position: (2, 1),
 },
 position: (1, 1),
}