---
Function {
 argument: Destructured {
  identifier: None,
  arguments: [
   DestructuredArgument {
    identifier: "config",
    default: None,
   },
   DestructuredArgument {
    identifier: "lib",
    default: None,
   },
   DestructuredArgument {
    identifier: "pkgs",
    default: None,
   },
  ],
  ellipsis: true,
 },
 definition: With {
  expression: Variable {
   identifier: "lib",
   position: (3, 6),
  },
  target: LetIn {
   bindings: [
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "cfg",
        position: (7, 3),
       },
      ],
     },
     to: PropertyAccess {
      expression: Variable {
       identifier: "config",
       position: (7, 9),
      },
      attribute_path: AttributePath {
       parts: [
        Raw {
         content: "services",
         position: (7, 16),
        },
        Raw {
         content: "opendkim",
         position: (7, 25),
        },
       ],
      },
      default: None,
     },
    },
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "defaultSock",
        position: (9, 3),
       },
      ],
     },
     to: String {
      parts: [
       Raw {
        content: "local:/run/opendkim/opendkim.sock",
        position: (9, 18),
       },
      ],
      position: (9, 17),
     },
    },
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "keyFile",
        position: (11, 3),
       },
      ],
     },
     to: String {
      parts: [
       Expression {
        expression: PropertyAccess {
         expression: Variable {
          identifier: "cfg",
          position: (11, 16),
         },
         attribute_path: AttributePath {
          parts: [
           Raw {
            content: "keyPath",
            position: (11, 20),
           },
          ],
         },
         default: None,
        },
       },
       Raw {
        content: "/",
        position: (11, 28),
       },
       Expression {
        expression: PropertyAccess {
         expression: Variable {
          identifier: "cfg",
          position: (11, 31),
         },
         attribute_path: AttributePath {
          parts: [
           Raw {
            content: "selector",
            position: (11, 35),
           },
          ],
         },
         default: None,
        },
       },
       Raw {
        content: ".private",
        position: (11, 44),
       },
      ],
      position: (11, 13),
     },
    },
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "args",
        position: (13, 3),
       },
      ],
     },
     to: BinaryOperation {
      operator: Concatenation,
      operands: [
       List {
        elements: [
         String {
          parts: [
           Raw {
            content: "-f",
            position: (13, 13),
           },
          ],
          position: (13, 12),
         },
         String {
          parts: [
           Raw {
            content: "-l",
            position: (13, 18),
           },
          ],
          position: (13, 17),
         },
         String {
          parts: [
           Raw {
            content: "-p",
            position: (14, 13),
           },
          ],
          position: (14, 12),
         },
         PropertyAccess {
          expression: Variable {
           identifier: "cfg",
           position: (14, 17),
          },
          attribute_path: AttributePath {
           parts: [
            Raw {
             content: "socket",
             position: (14, 21),
            },
           ],
          },
          default: None,
         },
         String {
          parts: [
           Raw {
            content: "-d",
            position: (15, 13),
           },
          ],
          position: (15, 12),
         },
         PropertyAccess {
          expression: Variable {
           identifier: "cfg",
           position: (15, 17),
          },
          attribute_path: AttributePath {
           parts: [
            Raw {
             content: "domains",
             position: (15, 21),
            },
           ],
          },
          default: None,
         },
         String {
          parts: [
           Raw {
            content: "-k",
            position: (16, 13),
           },
          ],
          position: (16, 12),
         },
         Variable {
          identifier: "keyFile",
          position: (16, 17),
         },
         String {
          parts: [
           Raw {
            content: "-s",
            position: (17, 13),
           },
          ],
          position: (17, 12),
         },
         PropertyAccess {
          expression: Variable {
           identifier: "cfg",
           position: (17, 17),
          },
          attribute_path: AttributePath {
           parts: [
            Raw {
             content: "selector",
             position: (17, 21),
            },
           ],
          },
          default: None,
         },
        ],
        position: (13, 10),
       },
       FunctionApplication {
        function: Variable {
         identifier: "optionals",
         position: (18, 15),
        },
        arguments: [
         Parentheses {
          expression: BinaryOperation {
           operator: NotEqualTo,
           operands: [
            PropertyAccess {
             expression: Variable {
              identifier: "cfg",
              position: (18, 26),
             },
             attribute_path: AttributePath {
              parts: [
               Raw {
                content: "configFile",
                position: (18, 30),
               },
              ],
             },
             default: None,
            },
            Variable {
             identifier: "null",
             position: (18, 44),
            },
           ],
           position: (18, 41),
          },
          position: (18, 25),
         },
         List {
          elements: [
           String {
            parts: [
             Raw {
              content: "-x",
              position: (18, 53),
             },
            ],
            position: (18, 52),
           },
           PropertyAccess {
            expression: Variable {
             identifier: "cfg",
             position: (18, 57),
            },
            attribute_path: AttributePath {
             parts: [
              Raw {
               content: "configFile",
               position: (18, 61),
              },
             ],
            },
            default: None,
           },
          ],
          position: (18, 50),
         },
        ],
       },
      ],
      position: (18, 12),
     },
    },
   ],
   target: Map {
    bindings: [
     Binding {
      from: AttributePath {
       parts: [
        Raw {
         content: "imports",
         position: (21, 3),
        },
       ],
      },
      to: List {
       elements: [
        Parentheses {
         expression: FunctionApplication {
          function: Variable {
           identifier: "mkRenamedOptionModule",
           position: (22, 6),
          },
          arguments: [
           List {
            elements: [
             String {
              parts: [
               Raw {
                content: "services",
                position: (22, 31),
               },
              ],
              position: (22, 30),
             },
             String {
              parts: [
               Raw {
                content: "opendkim",
                position: (22, 42),
               },
              ],
              position: (22, 41),
             },
             String {
              parts: [
               Raw {
                content: "keyFile",
                position: (22, 53),
               },
              ],
              position: (22, 52),
             },
            ],
            position: (22, 28),
           },
           List {
            elements: [
             String {
              parts: [
               Raw {
                content: "services",
                position: (22, 67),
               },
              ],
              position: (22, 66),
             },
             String {
              parts: [
               Raw {
                content: "opendkim",
                position: (22, 78),
               },
              ],
              position: (22, 77),
             },
             String {
              parts: [
               Raw {
                content: "keyPath",
                position: (22, 89),
               },
              ],
              position: (22, 88),
             },
            ],
            position: (22, 64),
           },
          ],
         },
         position: (22, 5),
        },
       ],
       position: (21, 13),
      },
     },
     Binding {
      from: AttributePath {
       parts: [
        Raw {
         content: "options",
         position: (27, 3),
        },
       ],
      },
      to: Map {
       bindings: [
        Binding {
         from: AttributePath {
          parts: [
           Raw {
            content: "services",
            position: (29, 5),
           },
           Raw {
            content: "opendkim",
            position: (29, 14),
           },
          ],
         },
         to: Map {
          bindings: [
           Binding {
            from: AttributePath {
             parts: [
              Raw {
               content: "enable",
               position: (31, 7),
              },
             ],
            },
            to: FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (31, 16),
             },
             arguments: [
              Map {
               bindings: [
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "type",
                    position: (32, 9),
                   },
                  ],
                 },
                 to: PropertyAccess {
                  expression: Variable {
                   identifier: "types",
                   position: (32, 16),
                  },
                  attribute_path: AttributePath {
                   parts: [
                    Raw {
                     content: "bool",
                     position: (32, 22),
                    },
                   ],
                  },
                  default: None,
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "default",
                    position: (33, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "false",
                  position: (33, 19),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "description",
                    position: (34, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "Whether to enable the OpenDKIM sender authentication system.",
                    position: (34, 24),
                   },
                  ],
                  position: (34, 23),
                 },
                },
               ],
               recursive: false,
               position: (31, 25),
              },
             ],
            },
           },
           Binding {
            from: AttributePath {
             parts: [
              Raw {
               content: "socket",
               position: (37, 7),
              },
             ],
            },
            to: FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (37, 16),
             },
             arguments: [
              Map {
               bindings: [
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "type",
                    position: (38, 9),
                   },
                  ],
                 },
                 to: PropertyAccess {
                  expression: Variable {
                   identifier: "types",
                   position: (38, 16),
                  },
                  attribute_path: AttributePath {
                   parts: [
                    Raw {
                     content: "str",
                     position: (38, 22),
                    },
                   ],
                  },
                  default: None,
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "default",
                    position: (39, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "defaultSock",
                  position: (39, 19),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "description",
                    position: (40, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "Socket which is used for communication with OpenDKIM.",
                    position: (40, 24),
                   },
                  ],
                  position: (40, 23),
                 },
                },
               ],
               recursive: false,
               position: (37, 25),
              },
             ],
            },
           },
           Binding {
            from: AttributePath {
             parts: [
              Raw {
               content: "user",
               position: (43, 7),
              },
             ],
            },
            to: FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (43, 14),
             },
             arguments: [
              Map {
               bindings: [
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "type",
                    position: (44, 9),
                   },
                  ],
                 },
                 to: PropertyAccess {
                  expression: Variable {
                   identifier: "types",
                   position: (44, 16),
                  },
                  attribute_path: AttributePath {
                   parts: [
                    Raw {
                     content: "str",
                     position: (44, 22),
                    },
                   ],
                  },
                  default: None,
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "default",
                    position: (45, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "opendkim",
                    position: (45, 20),
                   },
                  ],
                  position: (45, 19),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "description",
                    position: (46, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "User for the daemon.",
                    position: (46, 24),
                   },
                  ],
                  position: (46, 23),
                 },
                },
               ],
               recursive: false,
               position: (43, 23),
              },
             ],
            },
           },
           Binding {
            from: AttributePath {
             parts: [
              Raw {
               content: "group",
               position: (49, 7),
              },
             ],
            },
            to: FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (49, 15),
             },
             arguments: [
              Map {
               bindings: [
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "type",
                    position: (50, 9),
                   },
                  ],
                 },
                 to: PropertyAccess {
                  expression: Variable {
                   identifier: "types",
                   position: (50, 16),
                  },
                  attribute_path: AttributePath {
                   parts: [
                    Raw {
                     content: "str",
                     position: (50, 22),
                    },
                   ],
                  },
                  default: None,
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "default",
                    position: (51, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "opendkim",
                    position: (51, 20),
                   },
                  ],
                  position: (51, 19),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "description",
                    position: (52, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "Group for the daemon.",
                    position: (52, 24),
                   },
                  ],
                  position: (52, 23),
                 },
                },
               ],
               recursive: false,
               position: (49, 24),
              },
             ],
            },
           },
           Binding {
            from: AttributePath {
             parts: [
              Raw {
               content: "domains",
               position: (55, 7),
              },
             ],
            },
            to: FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (55, 17),
             },
             arguments: [
              Map {
               bindings: [
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "type",
                    position: (56, 9),
                   },
                  ],
                 },
                 to: PropertyAccess {
                  expression: Variable {
                   identifier: "types",
                   position: (56, 16),
                  },
                  attribute_path: AttributePath {
                   parts: [
                    Raw {
                     content: "str",
                     position: (56, 22),
                    },
                   ],
                  },
                  default: None,
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "default",
                    position: (57, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "csl:",
                    position: (57, 20),
                   },
                   Expression {
                    expression: PropertyAccess {
                     expression: Variable {
                      identifier: "config",
                      position: (57, 26),
                     },
                     attribute_path: AttributePath {
                      parts: [
                       Raw {
                        content: "networking",
                        position: (57, 33),
                       },
                       Raw {
                        content: "hostName",
                        position: (57, 44),
                       },
                      ],
                     },
                     default: None,
                    },
                   },
                  ],
                  position: (57, 19),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "defaultText",
                    position: (58, 9),
                   },
                  ],
                 },
                 to: FunctionApplication {
                  function: Variable {
                   identifier: "literalExpression",
                   position: (58, 23),
                  },
                  arguments: [
                   String {
                    parts: [
                     Raw {
                      content: "\"csl:",
                      position: (58, 43),
                     },
                     Raw {
                      content: "$",
                      position: (58, 48),
                     },
                     Raw {
                      content: "{config.networking.hostName}\"",
                      position: (58, 51),
                     },
                    ],
                    position: (58, 41),
                   },
                  ],
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "example",
                    position: (59, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "csl:example.com,mydomain.net",
                    position: (59, 20),
                   },
                  ],
                  position: (59, 19),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "description",
                    position: (60, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "Local domains set (see <literal>opendkim(8)</literal> for more information on datasets).\nMessages from them are signed, not verified.\n",
                    position: (61, 1),
                   },
                  ],
                  position: (60, 23),
                 },
                },
               ],
               recursive: false,
               position: (55, 26),
              },
             ],
            },
           },
           Binding {
            from: AttributePath {
             parts: [
              Raw {
               content: "keyPath",
               position: (66, 7),
              },
             ],
            },
            to: FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (66, 17),
             },
             arguments: [
              Map {
               bindings: [
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "type",
                    position: (67, 9),
                   },
                  ],
                 },
                 to: PropertyAccess {
                  expression: Variable {
                   identifier: "types",
                   position: (67, 16),
                  },
                  attribute_path: AttributePath {
                   parts: [
                    Raw {
                     content: "path",
                     position: (67, 22),
                    },
                   ],
                  },
                  default: None,
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "description",
                    position: (68, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "The path that opendkim should put its generated private keys into.\nThe DNS settings will be found in this directory with the name selector.txt.\n",
                    position: (69, 1),
                   },
                  ],
                  position: (68, 23),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "default",
                    position: (72, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "/var/lib/opendkim/keys",
                    position: (72, 20),
                   },
                  ],
                  position: (72, 19),
                 },
                },
               ],
               recursive: false,
               position: (66, 26),
              },
             ],
            },
           },
           Binding {
            from: AttributePath {
             parts: [
              Raw {
               content: "selector",
               position: (75, 7),
              },
             ],
            },
            to: FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (75, 18),
             },
             arguments: [
              Map {
               bindings: [
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "type",
                    position: (76, 9),
                   },
                  ],
                 },
                 to: PropertyAccess {
                  expression: Variable {
                   identifier: "types",
                   position: (76, 16),
                  },
                  attribute_path: AttributePath {
                   parts: [
                    Raw {
                     content: "str",
                     position: (76, 22),
                    },
                   ],
                  },
                  default: None,
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "description",
                    position: (77, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "Selector to use when signing.",
                    position: (77, 24),
                   },
                  ],
                  position: (77, 23),
                 },
                },
               ],
               recursive: false,
               position: (75, 27),
              },
             ],
            },
           },
           Binding {
            from: AttributePath {
             parts: [
              Raw {
               content: "configFile",
               position: (80, 7),
              },
             ],
            },
            to: FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (80, 20),
             },
             arguments: [
              Map {
               bindings: [
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "type",
                    position: (81, 9),
                   },
                  ],
                 },
                 to: FunctionApplication {
                  function: PropertyAccess {
                   expression: Variable {
                    identifier: "types",
                    position: (81, 16),
                   },
                   attribute_path: AttributePath {
                    parts: [
                     Raw {
                      content: "nullOr",
                      position: (81, 22),
                     },
                    ],
                   },
                   default: None,
                  },
                  arguments: [
                   PropertyAccess {
                    expression: Variable {
                     identifier: "types",
                     position: (81, 29),
                    },
                    attribute_path: AttributePath {
                     parts: [
                      Raw {
                       content: "path",
                       position: (81, 35),
                      },
                     ],
                    },
                    default: None,
                   },
                  ],
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "default",
                    position: (82, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "null",
                  position: (82, 19),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "description",
                    position: (83, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "Additional opendkim configuration.",
                    position: (83, 24),
                   },
                  ],
                  position: (83, 23),
                 },
                },
               ],
               recursive: false,
               position: (80, 29),
              },
             ],
            },
           },
          ],
          recursive: false,
          position: (29, 25),
         },
        },
       ],
       recursive: false,
       position: (27, 13),
      },
     },
     Binding {
      from: AttributePath {
       parts: [
        Raw {
         content: "config",
         position: (93, 3),
        },
       ],
      },
      to: FunctionApplication {
       function: Variable {
        identifier: "mkIf",
        position: (93, 12),
       },
       arguments: [
        PropertyAccess {
         expression: Variable {
          identifier: "cfg",
          position: (93, 17),
         },
         attribute_path: AttributePath {
          parts: [
           Raw {
            content: "enable",
            position: (93, 21),
           },
          ],
         },
         default: None,
        },
        Map {
         bindings: [
          Binding {
           from: AttributePath {
            parts: [
             Raw {
              content: "users",
              position: (95, 5),
             },
             Raw {
              content: "users",
              position: (95, 11),
             },
            ],
           },
           to: FunctionApplication {
            function: Variable {
             identifier: "optionalAttrs",
             position: (95, 19),
            },
            arguments: [
             Parentheses {
              expression: BinaryOperation {
               operator: EqualTo,
               operands: [
                PropertyAccess {
                 expression: Variable {
                  identifier: "cfg",
                  position: (95, 34),
                 },
                 attribute_path: AttributePath {
                  parts: [
                   Raw {
                    content: "user",
                    position: (95, 38),
                   },
                  ],
                 },
                 default: None,
                },
                String {
                 parts: [
                  Raw {
                   content: "opendkim",
                   position: (95, 47),
                  },
                 ],
                 position: (95, 46),
                },
               ],
               position: (95, 43),
              },
              position: (95, 33),
             },
             Map {
              bindings: [
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "opendkim",
                   position: (96, 7),
                  },
                 ],
                },
                to: Map {
                 bindings: [
                  Binding {
                   from: AttributePath {
                    parts: [
                     Raw {
                      content: "group",
                      position: (97, 9),
                     },
                    ],
                   },
                   to: PropertyAccess {
                    expression: Variable {
                     identifier: "cfg",
                     position: (97, 17),
                    },
                    attribute_path: AttributePath {
                     parts: [
                      Raw {
                       content: "group",
                       position: (97, 21),
                      },
                     ],
                    },
                    default: None,
                   },
                  },
                  Binding {
                   from: AttributePath {
                    parts: [
                     Raw {
                      content: "uid",
                      position: (98, 9),
                     },
                    ],
                   },
                   to: PropertyAccess {
                    expression: Variable {
                     identifier: "config",
                     position: (98, 15),
                    },
                    attribute_path: AttributePath {
                     parts: [
                      Raw {
                       content: "ids",
                       position: (98, 22),
                      },
                      Raw {
                       content: "uids",
                       position: (98, 26),
                      },
                      Raw {
                       content: "opendkim",
                       position: (98, 31),
                      },
                     ],
                    },
                    default: None,
                   },
                  },
                 ],
                 recursive: false,
                 position: (96, 18),
                },
               },
              ],
              recursive: false,
              position: (95, 58),
             },
            ],
           },
          },
          Binding {
           from: AttributePath {
            parts: [
             Raw {
              content: "users",
              position: (102, 5),
             },
             Raw {
              content: "groups",
              position: (102, 11),
             },
            ],
           },
           to: FunctionApplication {
            function: Variable {
             identifier: "optionalAttrs",
             position: (102, 20),
            },
            arguments: [
             Parentheses {
              expression: BinaryOperation {
               operator: EqualTo,
               operands: [
                PropertyAccess {
                 expression: Variable {
                  identifier: "cfg",
                  position: (102, 35),
                 },
                 attribute_path: AttributePath {
                  parts: [
                   Raw {
                    content: "group",
                    position: (102, 39),
                   },
                  ],
                 },
                 default: None,
                },
                String {
                 parts: [
                  Raw {
                   content: "opendkim",
                   position: (102, 49),
                  },
                 ],
                 position: (102, 48),
                },
               ],
               position: (102, 45),
              },
              position: (102, 34),
             },
             Map {
              bindings: [
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "opendkim",
                   position: (103, 7),
                  },
                  Raw {
                   content: "gid",
                   position: (103, 16),
                  },
                 ],
                },
                to: PropertyAccess {
                 expression: Variable {
                  identifier: "config",
                  position: (103, 22),
                 },
                 attribute_path: AttributePath {
                  parts: [
                   Raw {
                    content: "ids",
                    position: (103, 29),
                   },
                   Raw {
                    content: "gids",
                    position: (103, 33),
                   },
                   Raw {
                    content: "opendkim",
                    position: (103, 38),
                   },
                  ],
                 },
                 default: None,
                },
               },
              ],
              recursive: false,
              position: (102, 60),
             },
            ],
           },
          },
          Binding {
           from: AttributePath {
            parts: [
             Raw {
              content: "environment",
              position: (106, 5),
             },
             Raw {
              content: "systemPackages",
              position: (106, 17),
             },
            ],
           },
           to: List {
            elements: [
             PropertyAccess {
              expression: Variable {
               identifier: "pkgs",
               position: (106, 36),
              },
              attribute_path: AttributePath {
               parts: [
                Raw {
                 content: "opendkim",
                 position: (106, 41),
                },
               ],
              },
              default: None,
             },
            ],
            position: (106, 34),
           },
          },
          Binding {
           from: AttributePath {
            parts: [
             Raw {
              content: "systemd",
              position: (108, 5),
             },
             Raw {
              content: "tmpfiles",
              position: (108, 13),
             },
             Raw {
              content: "rules",
              position: (108, 22),
             },
            ],
           },
           to: List {
            elements: [
             String {
              parts: [
               Raw {
                content: "d '",
                position: (109, 8),
               },
               Expression {
                expression: PropertyAccess {
                 expression: Variable {
                  identifier: "cfg",
                  position: (109, 13),
                 },
                 attribute_path: AttributePath {
                  parts: [
                   Raw {
                    content: "keyPath",
                    position: (109, 17),
                   },
                  ],
                 },
                 default: None,
                },
               },
               Raw {
                content: "' - ",
                position: (109, 25),
               },
               Expression {
                expression: PropertyAccess {
                 expression: Variable {
                  identifier: "cfg",
                  position: (109, 31),
                 },
                 attribute_path: AttributePath {
                  parts: [
                   Raw {
                    content: "user",
                    position: (109, 35),
                   },
                  ],
                 },
                 default: None,
                },
               },
               Raw {
                content: " ",
                position: (109, 40),
               },
               Expression {
                expression: PropertyAccess {
                 expression: Variable {
                  identifier: "cfg",
                  position: (109, 43),
                 },
                 attribute_path: AttributePath {
                  parts: [
                   Raw {
                    content: "group",
                    position: (109, 47),
                   },
                  ],
                 },
                 default: None,
                },
               },
               Raw {
                content: " - -",
                position: (109, 53),
               },
              ],
              position: (109, 7),
             },
            ],
            position: (108, 30),
           },
          },
          Binding {
           from: AttributePath {
            parts: [
             Raw {
              content: "systemd",
              position: (112, 5),
             },
             Raw {
              content: "services",
              position: (112, 13),
             },
             Raw {
              content: "opendkim",
              position: (112, 22),
             },
            ],
           },
           to: Map {
            bindings: [
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "description",
                 position: (113, 7),
                },
               ],
              },
              to: String {
               parts: [
                Raw {
                 content: "OpenDKIM signing and verification daemon",
                 position: (113, 22),
                },
               ],
               position: (113, 21),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "after",
                 position: (114, 7),
                },
               ],
              },
              to: List {
               elements: [
                String {
                 parts: [
                  Raw {
                   content: "network.target",
                   position: (114, 18),
                  },
                 ],
                 position: (114, 17),
                },
               ],
               position: (114, 15),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "wantedBy",
                 position: (115, 7),
                },
               ],
              },
              to: List {
               elements: [
                String {
                 parts: [
                  Raw {
                   content: "multi-user.target",
                   position: (115, 21),
                  },
                 ],
                 position: (115, 20),
                },
               ],
               position: (115, 18),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "preStart",
                 position: (117, 7),
                },
               ],
              },
              to: String {
               parts: [
                Raw {
                 content: "cd \"",
                 position: (118, 1),
                },
                Expression {
                 expression: PropertyAccess {
                  expression: Variable {
                   identifier: "cfg",
                   position: (118, 15),
                  },
                  attribute_path: AttributePath {
                   parts: [
                    Raw {
                     content: "keyPath",
                     position: (118, 19),
                    },
                   ],
                  },
                  default: None,
                 },
                },
                Raw {
                 content: "\"\nif ! test -f ",
                 position: (118, 27),
                },
                Expression {
                 expression: PropertyAccess {
                  expression: Variable {
                   identifier: "cfg",
                   position: (119, 24),
                  },
                  attribute_path: AttributePath {
                   parts: [
                    Raw {
                     content: "selector",
                     position: (119, 28),
                    },
                   ],
                  },
                  default: None,
                 },
                },
                Raw {
                 content: ".private; then\n  ",
                 position: (119, 37),
                },
                Expression {
                 expression: PropertyAccess {
                  expression: Variable {
                   identifier: "pkgs",
                   position: (120, 13),
                  },
                  attribute_path: AttributePath {
                   parts: [
                    Raw {
                     content: "opendkim",
                     position: (120, 18),
                    },
                   ],
                  },
                  default: None,
                 },
                },
                Raw {
                 content: "/bin/opendkim-genkey -s ",
                 position: (120, 27),
                },
                Expression {
                 expression: PropertyAccess {
                  expression: Variable {
                   identifier: "cfg",
                   position: (120, 53),
                  },
                  attribute_path: AttributePath {
                   parts: [
                    Raw {
                     content: "selector",
                     position: (120, 57),
                    },
                   ],
                  },
                  default: None,
                 },
                },
                Raw {
                 content: " -d all-domains-generic-key\n  echo \"Generated OpenDKIM key! Please update your DNS settings:\\n\"\n  echo \"-------------------------------------------------------------\"\n  cat ",
                 position: (120, 66),
                },
                Expression {
                 expression: PropertyAccess {
                  expression: Variable {
                   identifier: "cfg",
                   position: (123, 17),
                  },
                  attribute_path: AttributePath {
                   parts: [
                    Raw {
                     content: "selector",
                     position: (123, 21),
                    },
                   ],
                  },
                  default: None,
                 },
                },
                Raw {
                 content: ".txt\n  echo \"-------------------------------------------------------------\"\nfi\n",
                 position: (123, 30),
                },
               ],
               position: (117, 18),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "serviceConfig",
                 position: (128, 7),
                },
               ],
              },
              to: Map {
               bindings: [
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "ExecStart",
                    position: (129, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Expression {
                    expression: PropertyAccess {
                     expression: Variable {
                      identifier: "pkgs",
                      position: (129, 24),
                     },
                     attribute_path: AttributePath {
                      parts: [
                       Raw {
                        content: "opendkim",
                        position: (129, 29),
                       },
                      ],
                     },
                     default: None,
                    },
                   },
                   Raw {
                    content: "/bin/opendkim ",
                    position: (129, 38),
                   },
                   Expression {
                    expression: FunctionApplication {
                     function: Variable {
                      identifier: "escapeShellArgs",
                      position: (129, 54),
                     },
                     arguments: [
                      Variable {
                       identifier: "args",
                       position: (129, 70),
                      },
                     ],
                    },
                   },
                  ],
                  position: (129, 21),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "User",
                    position: (130, 9),
                   },
                  ],
                 },
                 to: PropertyAccess {
                  expression: Variable {
                   identifier: "cfg",
                   position: (130, 16),
                  },
                  attribute_path: AttributePath {
                   parts: [
                    Raw {
                     content: "user",
                     position: (130, 20),
                    },
                   ],
                  },
                  default: None,
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "Group",
                    position: (131, 9),
                   },
                  ],
                 },
                 to: PropertyAccess {
                  expression: Variable {
                   identifier: "cfg",
                   position: (131, 17),
                  },
                  attribute_path: AttributePath {
                   parts: [
                    Raw {
                     content: "group",
                     position: (131, 21),
                    },
                   ],
                  },
                  default: None,
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "RuntimeDirectory",
                    position: (132, 9),
                   },
                  ],
                 },
                 to: FunctionApplication {
                  function: Variable {
                   identifier: "optional",
                   position: (132, 28),
                  },
                  arguments: [
                   Parentheses {
                    expression: BinaryOperation {
                     operator: EqualTo,
                     operands: [
                      PropertyAccess {
                       expression: Variable {
                        identifier: "cfg",
                        position: (132, 38),
                       },
                       attribute_path: AttributePath {
                        parts: [
                         Raw {
                          content: "socket",
                          position: (132, 42),
                         },
                        ],
                       },
                       default: None,
                      },
                      Variable {
                       identifier: "defaultSock",
                       position: (132, 52),
                      },
                     ],
                     position: (132, 49),
                    },
                    position: (132, 37),
                   },
                   String {
                    parts: [
                     Raw {
                      content: "opendkim",
                      position: (132, 66),
                     },
                    ],
                    position: (132, 65),
                   },
                  ],
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "StateDirectory",
                    position: (133, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "opendkim",
                    position: (133, 27),
                   },
                  ],
                  position: (133, 26),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "StateDirectoryMode",
                    position: (134, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "0700",
                    position: (134, 31),
                   },
                  ],
                  position: (134, 30),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "ReadWritePaths",
                    position: (135, 9),
                   },
                  ],
                 },
                 to: List {
                  elements: [
                   PropertyAccess {
                    expression: Variable {
                     identifier: "cfg",
                     position: (135, 28),
                    },
                    attribute_path: AttributePath {
                     parts: [
                      Raw {
                       content: "keyPath",
                       position: (135, 32),
                      },
                     ],
                    },
                    default: None,
                   },
                  ],
                  position: (135, 26),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "AmbientCapabilities",
                    position: (137, 9),
                   },
                  ],
                 },
                 to: List {
                  elements: [],
                  position: (137, 31),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "CapabilityBoundingSet",
                    position: (138, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [],
                  position: (138, 33),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "DevicePolicy",
                    position: (139, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "closed",
                    position: (139, 25),
                   },
                  ],
                  position: (139, 24),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "LockPersonality",
                    position: (140, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (140, 27),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "MemoryDenyWriteExecute",
                    position: (141, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (141, 34),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "NoNewPrivileges",
                    position: (142, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (142, 27),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "PrivateDevices",
                    position: (143, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (143, 26),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "PrivateMounts",
                    position: (144, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (144, 25),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "PrivateTmp",
                    position: (145, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (145, 22),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "PrivateUsers",
                    position: (146, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (146, 24),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "ProtectClock",
                    position: (147, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (147, 24),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "ProtectControlGroups",
                    position: (148, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (148, 32),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "ProtectHome",
                    position: (149, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (149, 23),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "ProtectHostname",
                    position: (150, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (150, 27),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "ProtectKernelLogs",
                    position: (151, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (151, 29),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "ProtectKernelModules",
                    position: (152, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (152, 32),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "ProtectKernelTunables",
                    position: (153, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (153, 33),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "ProtectSystem",
                    position: (154, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "strict",
                    position: (154, 26),
                   },
                  ],
                  position: (154, 25),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "RemoveIPC",
                    position: (155, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (155, 21),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "RestrictAddressFamilies",
                    position: (156, 9),
                   },
                  ],
                 },
                 to: List {
                  elements: [
                   String {
                    parts: [
                     Raw {
                      content: "AF_INET",
                      position: (156, 38),
                     },
                    ],
                    position: (156, 37),
                   },
                   String {
                    parts: [
                     Raw {
                      content: "AF_INET6 AF_UNIX",
                      position: (156, 48),
                     },
                    ],
                    position: (156, 47),
                   },
                  ],
                  position: (156, 35),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "RestrictNamespaces",
                    position: (157, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (157, 30),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "RestrictRealtime",
                    position: (158, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (158, 28),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "RestrictSUIDSGID",
                    position: (159, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (159, 28),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "SystemCallArchitectures",
                    position: (160, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "native",
                    position: (160, 36),
                   },
                  ],
                  position: (160, 35),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "SystemCallFilter",
                    position: (161, 9),
                   },
                  ],
                 },
                 to: List {
                  elements: [
                   String {
                    parts: [
                     Raw {
                      content: "@system-service",
                      position: (161, 31),
                     },
                    ],
                    position: (161, 30),
                   },
                   String {
                    parts: [
                     Raw {
                      content: "~@privileged @resources",
                      position: (161, 49),
                     },
                    ],
                    position: (161, 48),
                   },
                  ],
                  position: (161, 28),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "UMask",
                    position: (162, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "0077",
                    position: (162, 18),
                   },
                  ],
                  position: (162, 17),
                 },
                },
               ],
               recursive: false,
               position: (128, 23),
              },
             },
            ],
            recursive: false,
            position: (112, 33),
           },
          },
         ],
         recursive: false,
         position: (93, 28),
        },
       ],
      },
     },
    ],
    recursive: false,
    position: (20, 4),
   },
   position: (5, 1),
  },
  position: (3, 1),
 },
 position: (1, 1),
}