---
Function {
 argument: Destructured {
  identifier: None,
  arguments: [
   DestructuredArgument {
    identifier: "config",
    default: None,
   },
   DestructuredArgument {
    identifier: "lib",
    default: None,
   },
   DestructuredArgument {
    identifier: "pkgs",
    default: None,
   },
  ],
  ellipsis: true,
 },
 definition: With {
  expression: Variable {
   identifier: "lib",
   position: (2, 6),
  },
  target: LetIn {
   bindings: [
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "cfg",
        position: (4, 3),
       },
      ],
     },
     to: PropertyAccess {
      expression: Variable {
       identifier: "config",
       position: (4, 9),
      },
      attribute_path: AttributePath {
       parts: [
        Raw {
         content: "services",
         position: (4, 16),
        },
        Raw {
         content: "sssd",
         position: (4, 25),
        },
       ],
      },
      default: None,
     },
    },
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "nscd",
        position: (5, 3),
       },
      ],
     },
     to: PropertyAccess {
      expression: Variable {
       identifier: "config",
       position: (5, 10),
      },
      attribute_path: AttributePath {
       parts: [
        Raw {
         content: "services",
         position: (5, 17),
        },
        Raw {
         content: "nscd",
         position: (5, 26),
        },
       ],
      },
      default: None,
     },
    },
   ],
   target: Map {
    bindings: [
     Binding {
      from: AttributePath {
       parts: [
        Raw {
         content: "options",
         position: (7, 3),
        },
       ],
      },
      to: Map {
       bindings: [
        Binding {
         from: AttributePath {
          parts: [
           Raw {
            content: "services",
            position: (8, 5),
           },
           Raw {
            content: "sssd",
            position: (8, 14),
           },
          ],
         },
         to: Map {
          bindings: [
           Binding {
            from: AttributePath {
             parts: [
              Raw {
               content: "enable",
               position: (9, 7),
              },
             ],
            },
            to: FunctionApplication {
             function: Variable {
              identifier: "mkEnableOption",
              position: (9, 16),
             },
             arguments: [
              String {
               parts: [
                Raw {
                 content: "the System Security Services Daemon",
                 position: (9, 32),
                },
               ],
               position: (9, 31),
              },
             ],
            },
           },
           Binding {
            from: AttributePath {
             parts: [
              Raw {
               content: "config",
               position: (11, 7),
              },
             ],
            },
            to: FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (11, 16),
             },
             arguments: [
              Map {
               bindings: [
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "type",
                    position: (12, 9),
                   },
                  ],
                 },
                 to: PropertyAccess {
                  expression: Variable {
                   identifier: "types",
                   position: (12, 16),
                  },
                  attribute_path: AttributePath {
                   parts: [
                    Raw {
                     content: "lines",
                     position: (12, 22),
                    },
                   ],
                  },
                  default: None,
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "description",
                    position: (13, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "Contents of <filename>sssd.conf</filename>.",
                    position: (13, 24),
                   },
                  ],
                  position: (13, 23),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "default",
                    position: (14, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "[sssd]\nconfig_file_version = 2\nservices = nss, pam\ndomains = shadowutils\n\n[nss]\n\n[pam]\n\n[domain/shadowutils]\nid_provider = proxy\nproxy_lib_name = files\nauth_provider = proxy\nproxy_pam_target = sssd-shadowutils\nproxy_fast_alias = True\n",
                    position: (15, 1),
                   },
                  ],
                  position: (14, 19),
                 },
                },
               ],
               recursive: false,
               position: (11, 25),
              },
             ],
            },
           },
           Binding {
            from: AttributePath {
             parts: [
              Raw {
               content: "sshAuthorizedKeysIntegration",
               position: (33, 7),
              },
             ],
            },
            to: FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (33, 38),
             },
             arguments: [
              Map {
               bindings: [
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "type",
                    position: (34, 9),
                   },
                  ],
                 },
                 to: PropertyAccess {
                  expression: Variable {
                   identifier: "types",
                   position: (34, 16),
                  },
                  attribute_path: AttributePath {
                   parts: [
                    Raw {
                     content: "bool",
                     position: (34, 22),
                    },
                   ],
                  },
                  default: None,
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "default",
                    position: (35, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "false",
                  position: (35, 19),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "description",
                    position: (36, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "Whether to make sshd look up authorized keys from SSS.\nFor this to work, the <literal>ssh</literal> SSS service must be enabled in the sssd configuration.\n",
                    position: (37, 1),
                   },
                  ],
                  position: (36, 23),
                 },
                },
               ],
               recursive: false,
               position: (33, 47),
              },
             ],
            },
           },
          ],
          recursive: false,
          position: (8, 21),
         },
        },
       ],
       recursive: false,
       position: (7, 13),
      },
     },
     Binding {
      from: AttributePath {
       parts: [
        Raw {
         content: "config",
         position: (43, 3),
        },
       ],
      },
      to: FunctionApplication {
       function: Variable {
        identifier: "mkMerge",
        position: (43, 12),
       },
       arguments: [
        List {
         elements: [
          Parentheses {
           expression: FunctionApplication {
            function: Variable {
             identifier: "mkIf",
             position: (44, 6),
            },
            arguments: [
             PropertyAccess {
              expression: Variable {
               identifier: "cfg",
               position: (44, 11),
              },
              attribute_path: AttributePath {
               parts: [
                Raw {
                 content: "enable",
                 position: (44, 15),
                },
               ],
              },
              default: None,
             },
             Map {
              bindings: [
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "systemd",
                   position: (45, 7),
                  },
                  Raw {
                   content: "services",
                   position: (45, 15),
                  },
                  Raw {
                   content: "sssd",
                   position: (45, 24),
                  },
                 ],
                },
                to: Map {
                 bindings: [
                  Binding {
                   from: AttributePath {
                    parts: [
                     Raw {
                      content: "description",
                      position: (46, 9),
                     },
                    ],
                   },
                   to: String {
                    parts: [
                     Raw {
                      content: "System Security Services Daemon",
                      position: (46, 24),
                     },
                    ],
                    position: (46, 23),
                   },
                  },
                  Binding {
                   from: AttributePath {
                    parts: [
                     Raw {
                      content: "wantedBy",
                      position: (47, 9),
                     },
                    ],
                   },
                   to: List {
                    elements: [
                     String {
                      parts: [
                       Raw {
                        content: "multi-user.target",
                        position: (47, 26),
                       },
                      ],
                      position: (47, 25),
                     },
                    ],
                    position: (47, 23),
                   },
                  },
                  Binding {
                   from: AttributePath {
                    parts: [
                     Raw {
                      content: "before",
                      position: (48, 9),
                     },
                    ],
                   },
                   to: List {
                    elements: [
                     String {
                      parts: [
                       Raw {
                        content: "systemd-user-sessions.service",
                        position: (48, 21),
                       },
                      ],
                      position: (48, 20),
                     },
                     String {
                      parts: [
                       Raw {
                        content: "nss-user-lookup.target",
                        position: (48, 53),
                       },
                      ],
                      position: (48, 52),
                     },
                    ],
                    position: (48, 18),
                   },
                  },
                  Binding {
                   from: AttributePath {
                    parts: [
                     Raw {
                      content: "after",
                      position: (49, 9),
                     },
                    ],
                   },
                   to: List {
                    elements: [
                     String {
                      parts: [
                       Raw {
                        content: "network-online.target",
                        position: (49, 20),
                       },
                      ],
                      position: (49, 19),
                     },
                     String {
                      parts: [
                       Raw {
                        content: "nscd.service",
                        position: (49, 44),
                       },
                      ],
                      position: (49, 43),
                     },
                    ],
                    position: (49, 17),
                   },
                  },
                  Binding {
                   from: AttributePath {
                    parts: [
                     Raw {
                      content: "requires",
                      position: (50, 9),
                     },
                    ],
                   },
                   to: List {
                    elements: [
                     String {
                      parts: [
                       Raw {
                        content: "network-online.target",
                        position: (50, 23),
                       },
                      ],
                      position: (50, 22),
                     },
                     String {
                      parts: [
                       Raw {
                        content: "nscd.service",
                        position: (50, 47),
                       },
                      ],
                      position: (50, 46),
                     },
                    ],
                    position: (50, 20),
                   },
                  },
                  Binding {
                   from: AttributePath {
                    parts: [
                     Raw {
                      content: "wants",
                      position: (51, 9),
                     },
                    ],
                   },
                   to: List {
                    elements: [
                     String {
                      parts: [
                       Raw {
                        content: "nss-user-lookup.target",
                        position: (51, 20),
                       },
                      ],
                      position: (51, 19),
                     },
                    ],
                    position: (51, 17),
                   },
                  },
                  Binding {
                   from: AttributePath {
                    parts: [
                     Raw {
                      content: "restartTriggers",
                      position: (52, 9),
                     },
                    ],
                   },
                   to: List {
                    elements: [
                     PropertyAccess {
                      expression: Variable {
                       identifier: "config",
                       position: (53, 11),
                      },
                      attribute_path: AttributePath {
                       parts: [
                        Raw {
                         content: "environment",
                         position: (53, 18),
                        },
                        Raw {
                         content: "etc",
                         position: (53, 30),
                        },
                        Expression {
                         expression: String {
                          parts: [
                           Raw {
                            content: "nscd.conf",
                            position: (53, 35),
                           },
                          ],
                          position: (53, 34),
                         },
                        },
                        Raw {
                         content: "source",
                         position: (53, 46),
                        },
                       ],
                      },
                      default: None,
                     },
                     PropertyAccess {
                      expression: Variable {
                       identifier: "config",
                       position: (54, 11),
                      },
                      attribute_path: AttributePath {
                       parts: [
                        Raw {
                         content: "environment",
                         position: (54, 18),
                        },
                        Raw {
                         content: "etc",
                         position: (54, 30),
                        },
                        Expression {
                         expression: String {
                          parts: [
                           Raw {
                            content: "sssd/sssd.conf",
                            position: (54, 35),
                           },
                          ],
                          position: (54, 34),
                         },
                        },
                        Raw {
                         content: "source",
                         position: (54, 51),
                        },
                       ],
                      },
                      default: None,
                     },
                    ],
                    position: (52, 27),
                   },
                  },
                  Binding {
                   from: AttributePath {
                    parts: [
                     Raw {
                      content: "script",
                      position: (56, 9),
                     },
                    ],
                   },
                   to: String {
                    parts: [
                     Raw {
                      content: "export LDB_MODULES_PATH+=\"",
                      position: (57, 1),
                     },
                     Raw {
                      content: "$",
                      position: (57, 37),
                     },
                     Raw {
                      content: "{LDB_MODULES_PATH+:}",
                      position: (57, 40),
                     },
                     Expression {
                      expression: PropertyAccess {
                       expression: Variable {
                        identifier: "pkgs",
                        position: (57, 62),
                       },
                       attribute_path: AttributePath {
                        parts: [
                         Raw {
                          content: "ldb",
                          position: (57, 67),
                         },
                        ],
                       },
                       default: None,
                      },
                     },
                     Raw {
                      content: "/modules/ldb:",
                      position: (57, 71),
                     },
                     Expression {
                      expression: PropertyAccess {
                       expression: Variable {
                        identifier: "pkgs",
                        position: (57, 86),
                       },
                       attribute_path: AttributePath {
                        parts: [
                         Raw {
                          content: "sssd",
                          position: (57, 91),
                         },
                        ],
                       },
                       default: None,
                      },
                     },
                     Raw {
                      content: "/modules/ldb\"\nmkdir -p /var/lib/sss/{pubconf,db,mc,pipes,gpo_cache,secrets} /var/lib/sss/pipes/private /var/lib/sss/pubconf/krb5.include.d\n",
                      position: (57, 96),
                     },
                     Expression {
                      expression: PropertyAccess {
                       expression: Variable {
                        identifier: "pkgs",
                        position: (59, 13),
                       },
                       attribute_path: AttributePath {
                        parts: [
                         Raw {
                          content: "sssd",
                          position: (59, 18),
                         },
                        ],
                       },
                       default: None,
                      },
                     },
                     Raw {
                      content: "/bin/sssd -D\n",
                      position: (59, 23),
                     },
                    ],
                    position: (56, 18),
                   },
                  },
                  Binding {
                   from: AttributePath {
                    parts: [
                     Raw {
                      content: "serviceConfig",
                      position: (61, 9),
                     },
                    ],
                   },
                   to: Map {
                    bindings: [
                     Binding {
                      from: AttributePath {
                       parts: [
                        Raw {
                         content: "Type",
                         position: (62, 11),
                        },
                       ],
                      },
                      to: String {
                       parts: [
                        Raw {
                         content: "forking",
                         position: (62, 19),
                        },
                       ],
                       position: (62, 18),
                      },
                     },
                     Binding {
                      from: AttributePath {
                       parts: [
                        Raw {
                         content: "PIDFile",
                         position: (63, 11),
                        },
                       ],
                      },
                      to: String {
                       parts: [
                        Raw {
                         content: "/run/sssd.pid",
                         position: (63, 22),
                        },
                       ],
                       position: (63, 21),
                      },
                     },
                    ],
                    recursive: false,
                    position: (61, 25),
                   },
                  },
                 ],
                 recursive: false,
                 position: (45, 31),
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "environment",
                   position: (67, 7),
                  },
                  Raw {
                   content: "etc",
                   position: (67, 19),
                  },
                  Expression {
                   expression: String {
                    parts: [
                     Raw {
                      content: "sssd/sssd.conf",
                      position: (67, 24),
                     },
                    ],
                    position: (67, 23),
                   },
                  },
                 ],
                },
                to: Map {
                 bindings: [
                  Binding {
                   from: AttributePath {
                    parts: [
                     Raw {
                      content: "text",
                      position: (68, 9),
                     },
                    ],
                   },
                   to: PropertyAccess {
                    expression: Variable {
                     identifier: "cfg",
                     position: (68, 16),
                    },
                    attribute_path: AttributePath {
                     parts: [
                      Raw {
                       content: "config",
                       position: (68, 20),
                      },
                     ],
                    },
                    default: None,
                   },
                  },
                  Binding {
                   from: AttributePath {
                    parts: [
                     Raw {
                      content: "mode",
                      position: (69, 9),
                     },
                    ],
                   },
                   to: String {
                    parts: [
                     Raw {
                      content: "0400",
                      position: (69, 17),
                     },
                    ],
                    position: (69, 16),
                   },
                  },
                 ],
                 recursive: false,
                 position: (67, 42),
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "system",
                   position: (72, 7),
                  },
                  Raw {
                   content: "nssModules",
                   position: (72, 14),
                  },
                 ],
                },
                to: List {
                 elements: [
                  PropertyAccess {
                   expression: Variable {
                    identifier: "pkgs",
                    position: (72, 29),
                   },
                   attribute_path: AttributePath {
                    parts: [
                     Raw {
                      content: "sssd",
                      position: (72, 34),
                     },
                    ],
                   },
                   default: None,
                  },
                 ],
                 position: (72, 27),
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "system",
                   position: (73, 7),
                  },
                  Raw {
                   content: "nssDatabases",
                   position: (73, 14),
                  },
                 ],
                },
                to: Map {
                 bindings: [
                  Binding {
                   from: AttributePath {
                    parts: [
                     Raw {
                      content: "group",
                      position: (74, 9),
                     },
                    ],
                   },
                   to: List {
                    elements: [
                     String {
                      parts: [
                       Raw {
                        content: "sss",
                        position: (74, 20),
                       },
                      ],
                      position: (74, 19),
                     },
                    ],
                    position: (74, 17),
                   },
                  },
                  Binding {
                   from: AttributePath {
                    parts: [
                     Raw {
                      content: "passwd",
                      position: (75, 9),
                     },
                    ],
                   },
                   to: List {
                    elements: [
                     String {
                      parts: [
                       Raw {
                        content: "sss",
                        position: (75, 21),
                       },
                      ],
                      position: (75, 20),
                     },
                    ],
                    position: (75, 18),
                   },
                  },
                  Binding {
                   from: AttributePath {
                    parts: [
                     Raw {
                      content: "services",
                      position: (76, 9),
                     },
                    ],
                   },
                   to: List {
                    elements: [
                     String {
                      parts: [
                       Raw {
                        content: "sss",
                        position: (76, 23),
                       },
                      ],
                      position: (76, 22),
                     },
                    ],
                    position: (76, 20),
                   },
                  },
                  Binding {
                   from: AttributePath {
                    parts: [
                     Raw {
                      content: "shadow",
                      position: (77, 9),
                     },
                    ],
                   },
                   to: List {
                    elements: [
                     String {
                      parts: [
                       Raw {
                        content: "sss",
                        position: (77, 21),
                       },
                      ],
                      position: (77, 20),
                     },
                    ],
                    position: (77, 18),
                   },
                  },
                 ],
                 recursive: false,
                 position: (73, 29),
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "services",
                   position: (79, 7),
                  },
                  Raw {
                   content: "dbus",
                   position: (79, 16),
                  },
                  Raw {
                   content: "packages",
                   position: (79, 21),
                  },
                 ],
                },
                to: List {
                 elements: [
                  PropertyAccess {
                   expression: Variable {
                    identifier: "pkgs",
                    position: (79, 34),
                   },
                   attribute_path: AttributePath {
                    parts: [
                     Raw {
                      content: "sssd",
                      position: (79, 39),
                     },
                    ],
                   },
                   default: None,
                  },
                 ],
                 position: (79, 32),
                },
               },
              ],
              recursive: false,
              position: (44, 22),
             },
            ],
           },
           position: (44, 5),
          },
          Parentheses {
           expression: FunctionApplication {
            function: Variable {
             identifier: "mkIf",
             position: (82, 6),
            },
            arguments: [
             PropertyAccess {
              expression: Variable {
               identifier: "cfg",
               position: (82, 11),
              },
              attribute_path: AttributePath {
               parts: [
                Raw {
                 content: "sshAuthorizedKeysIntegration",
                 position: (82, 15),
                },
               ],
              },
              default: None,
             },
             Map {
              bindings: [
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "environment",
                   position: (85, 5),
                  },
                  Raw {
                   content: "etc",
                   position: (85, 17),
                  },
                  Expression {
                   expression: String {
                    parts: [
                     Raw {
                      content: "ssh/authorized_keys_command",
                      position: (85, 22),
                     },
                    ],
                    position: (85, 21),
                   },
                  },
                 ],
                },
                to: Map {
                 bindings: [
                  Binding {
                   from: AttributePath {
                    parts: [
                     Raw {
                      content: "mode",
                      position: (86, 7),
                     },
                    ],
                   },
                   to: String {
                    parts: [
                     Raw {
                      content: "0755",
                      position: (86, 15),
                     },
                    ],
                    position: (86, 14),
                   },
                  },
                  Binding {
                   from: AttributePath {
                    parts: [
                     Raw {
                      content: "text",
                      position: (87, 7),
                     },
                    ],
                   },
                   to: String {
                    parts: [
                     Raw {
                      content: "#!/bin/sh\nexec ",
                      position: (88, 1),
                     },
                     Expression {
                      expression: PropertyAccess {
                       expression: Variable {
                        identifier: "pkgs",
                        position: (89, 16),
                       },
                       attribute_path: AttributePath {
                        parts: [
                         Raw {
                          content: "sssd",
                          position: (89, 21),
                         },
                        ],
                       },
                       default: None,
                      },
                     },
                     Raw {
                      content: "/bin/sss_ssh_authorizedkeys \"$@\"\n",
                      position: (89, 26),
                     },
                    ],
                    position: (87, 14),
                   },
                  },
                 ],
                 recursive: false,
                 position: (85, 53),
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "services",
                   position: (92, 5),
                  },
                  Raw {
                   content: "openssh",
                   position: (92, 14),
                  },
                  Raw {
                   content: "authorizedKeysCommand",
                   position: (92, 22),
                  },
                 ],
                },
                to: String {
                 parts: [
                  Raw {
                   content: "/etc/ssh/authorized_keys_command",
                   position: (92, 47),
                  },
                 ],
                 position: (92, 46),
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "services",
                   position: (93, 5),
                  },
                  Raw {
                   content: "openssh",
                   position: (93, 14),
                  },
                  Raw {
                   content: "authorizedKeysCommandUser",
                   position: (93, 22),
                  },
                 ],
                },
                to: String {
                 parts: [
                  Raw {
                   content: "nobody",
                   position: (93, 51),
                  },
                 ],
                 position: (93, 50),
                },
               },
              ],
              recursive: false,
              position: (82, 44),
             },
            ],
           },
           position: (82, 5),
          },
         ],
         position: (43, 20),
        },
       ],
      },
     },
     Binding {
      from: AttributePath {
       parts: [
        Raw {
         content: "meta",
         position: (96, 3),
        },
        Raw {
         content: "maintainers",
         position: (96, 8),
        },
       ],
      },
      to: With {
       expression: Variable {
        identifier: "maintainers",
        position: (96, 27),
       },
       target: List {
        elements: [
         Variable {
          identifier: "bbigras",
          position: (96, 42),
         },
        ],
        position: (96, 40),
       },
       position: (96, 22),
      },
     },
    ],
    recursive: false,
    position: (6, 4),
   },
   position: (3, 1),
  },
  position: (2, 1),
 },
 position: (1, 1),
}