---
Function {
 argument: Destructured {
  identifier: None,
  arguments: [
   DestructuredArgument {
    identifier: "config",
    default: None,
   },
   DestructuredArgument {
    identifier: "pkgs",
    default: None,
   },
   DestructuredArgument {
    identifier: "lib",
    default: None,
   },
  ],
  ellipsis: true,
 },
 definition: With {
  expression: Variable {
   identifier: "lib",
   position: (3, 6),
  },
  target: Map {
   bindings: [
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "meta",
        position: (6, 3),
       },
      ],
     },
     to: Map {
      bindings: [
       Binding {
        from: AttributePath {
         parts: [
          Raw {
           content: "maintainers",
           position: (7, 5),
          },
         ],
        },
        to: List {
         elements: [
          PropertyAccess {
           expression: Variable {
            identifier: "maintainers",
            position: (7, 21),
           },
           attribute_path: AttributePath {
            parts: [
             Raw {
              content: "joachifm",
              position: (7, 33),
             },
            ],
           },
           default: None,
          },
         ],
         position: (7, 19),
        },
       },
      ],
      recursive: false,
      position: (6, 10),
     },
    },
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "options",
        position: (10, 3),
       },
      ],
     },
     to: Map {
      bindings: [
       Binding {
        from: AttributePath {
         parts: [
          Raw {
           content: "security",
           position: (11, 5),
          },
          Raw {
           content: "lockKernelModules",
           position: (11, 14),
          },
         ],
        },
        to: FunctionApplication {
         function: Variable {
          identifier: "mkOption",
          position: (11, 34),
         },
         arguments: [
          Map {
           bindings: [
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "type",
                position: (12, 7),
               },
              ],
             },
             to: PropertyAccess {
              expression: Variable {
               identifier: "types",
               position: (12, 14),
              },
              attribute_path: AttributePath {
               parts: [
                Raw {
                 content: "bool",
                 position: (12, 20),
                },
               ],
              },
              default: None,
             },
            },
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "default",
                position: (13, 7),
               },
              ],
             },
             to: Variable {
              identifier: "false",
              position: (13, 17),
             },
            },
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "description",
                position: (14, 7),
               },
              ],
             },
             to: String {
              parts: [
               Raw {
                content: "Disable kernel module loading once the system is fully initialised.\nModule loading is disabled until the next reboot. Problems caused\nby delayed module loading can be fixed by adding the module(s) in\nquestion to <option>boot.kernelModules</option>.\n",
                position: (15, 1),
               },
              ],
              position: (14, 21),
             },
            },
           ],
           recursive: false,
           position: (11, 43),
          },
         ],
        },
       },
      ],
      recursive: false,
      position: (10, 13),
     },
    },
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "config",
        position: (23, 3),
       },
      ],
     },
     to: FunctionApplication {
      function: Variable {
       identifier: "mkIf",
       position: (23, 12),
      },
      arguments: [
       PropertyAccess {
        expression: Variable {
         identifier: "config",
         position: (23, 17),
        },
        attribute_path: AttributePath {
         parts: [
          Raw {
           content: "security",
           position: (23, 24),
          },
          Raw {
           content: "lockKernelModules",
           position: (23, 33),
          },
         ],
        },
        default: None,
       },
       Map {
        bindings: [
         Binding {
          from: AttributePath {
           parts: [
            Raw {
             content: "boot",
             position: (24, 5),
            },
            Raw {
             content: "kernelModules",
             position: (24, 10),
            },
           ],
          },
          to: FunctionApplication {
           function: Variable {
            identifier: "concatMap",
            position: (24, 26),
           },
           arguments: [
            Parentheses {
             expression: Function {
              argument: Simple {
               identifier: "x",
              },
              definition: IfThenElse {
               predicate: BinaryOperation {
                operator: NotEqualTo,
                operands: [
                 PropertyAccess {
                  expression: Variable {
                   identifier: "x",
                   position: (25, 10),
                  },
                  attribute_path: AttributePath {
                   parts: [
                    Raw {
                     content: "device",
                     position: (25, 12),
                    },
                   ],
                  },
                  default: None,
                 },
                 Variable {
                  identifier: "null",
                  position: (25, 22),
                 },
                ],
                position: (25, 19),
               },
               then: IfThenElse {
                predicate: BinaryOperation {
                 operator: EqualTo,
                 operands: [
                  PropertyAccess {
                   expression: Variable {
                    identifier: "x",
                    position: (27, 14),
                   },
                   attribute_path: AttributePath {
                    parts: [
                     Raw {
                      content: "fsType",
                      position: (27, 16),
                     },
                    ],
                   },
                   default: None,
                  },
                  String {
                   parts: [
                    Raw {
                     content: "vfat",
                     position: (27, 27),
                    },
                   ],
                   position: (27, 26),
                  },
                 ],
                 position: (27, 23),
                },
                then: List {
                 elements: [
                  String {
                   parts: [
                    Raw {
                     content: "vfat",
                     position: (28, 21),
                    },
                   ],
                   position: (28, 20),
                  },
                  String {
                   parts: [
                    Raw {
                     content: "nls-cp437",
                     position: (28, 28),
                    },
                   ],
                   position: (28, 27),
                  },
                  String {
                   parts: [
                    Raw {
                     content: "nls-iso8859-1",
                     position: (28, 40),
                    },
                   ],
                   position: (28, 39),
                  },
                 ],
                 position: (28, 18),
                },
                else_: List {
                 elements: [
                  PropertyAccess {
                   expression: Variable {
                    identifier: "x",
                    position: (29, 20),
                   },
                   attribute_path: AttributePath {
                    parts: [
                     Raw {
                      content: "fsType",
                      position: (29, 22),
                     },
                    ],
                   },
                   default: None,
                  },
                 ],
                 position: (29, 18),
                },
                position: (27, 11),
               },
               else_: List {
                elements: [],
                position: (30, 14),
               },
               position: (25, 7),
              },
              position: (24, 37),
             },
             position: (24, 36),
            },
            PropertyAccess {
             expression: Variable {
              identifier: "config",
              position: (30, 18),
             },
             attribute_path: AttributePath {
              parts: [
               Raw {
                content: "system",
                position: (30, 25),
               },
               Raw {
                content: "build",
                position: (30, 32),
               },
               Raw {
                content: "fileSystems",
                position: (30, 38),
               },
              ],
             },
             default: None,
            },
           ],
          },
         },
         Binding {
          from: AttributePath {
           parts: [
            Raw {
             content: "systemd",
             position: (32, 5),
            },
            Raw {
             content: "services",
             position: (32, 13),
            },
            Raw {
             content: "disable-kernel-module-loading",
             position: (32, 22),
            },
           ],
          },
          to: Map {
           bindings: [
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "description",
                position: (33, 7),
               },
              ],
             },
             to: String {
              parts: [
               Raw {
                content: "Disable kernel module loading",
                position: (33, 22),
               },
              ],
              position: (33, 21),
             },
            },
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "wants",
                position: (35, 7),
               },
              ],
             },
             to: List {
              elements: [
               String {
                parts: [
                 Raw {
                  content: "systemd-udevd.service",
                  position: (35, 18),
                 },
                ],
                position: (35, 17),
               },
              ],
              position: (35, 15),
             },
            },
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "wantedBy",
                position: (36, 7),
               },
              ],
             },
             to: List {
              elements: [
               PropertyAccess {
                expression: Variable {
                 identifier: "config",
                 position: (36, 20),
                },
                attribute_path: AttributePath {
                 parts: [
                  Raw {
                   content: "systemd",
                   position: (36, 27),
                  },
                  Raw {
                   content: "defaultUnit",
                   position: (36, 35),
                  },
                 ],
                },
                default: None,
               },
              ],
              position: (36, 18),
             },
            },
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "after",
                position: (38, 7),
               },
              ],
             },
             to: List {
              elements: [
               String {
                parts: [
                 Raw {
                  content: "firewall.service",
                  position: (39, 12),
                 },
                ],
                position: (39, 11),
               },
               String {
                parts: [
                 Raw {
                  content: "systemd-modules-load.service",
                  position: (40, 12),
                 },
                ],
                position: (40, 11),
               },
               PropertyAccess {
                expression: Variable {
                 identifier: "config",
                 position: (41, 12),
                },
                attribute_path: AttributePath {
                 parts: [
                  Raw {
                   content: "systemd",
                   position: (41, 19),
                  },
                  Raw {
                   content: "defaultUnit",
                   position: (41, 27),
                  },
                 ],
                },
                default: None,
               },
              ],
              position: (39, 9),
             },
            },
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "unitConfig",
                position: (44, 7),
               },
               Raw {
                content: "ConditionPathIsReadWrite",
                position: (44, 18),
               },
              ],
             },
             to: String {
              parts: [
               Raw {
                content: "/proc/sys/kernel",
                position: (44, 46),
               },
              ],
              position: (44, 45),
             },
            },
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "serviceConfig",
                position: (46, 7),
               },
              ],
             },
             to: Map {
              bindings: [
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "Type",
                   position: (47, 11),
                  },
                 ],
                },
                to: String {
                 parts: [
                  Raw {
                   content: "oneshot",
                   position: (47, 19),
                  },
                 ],
                 position: (47, 18),
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "RemainAfterExit",
                   position: (48, 11),
                  },
                 ],
                },
                to: Variable {
                 identifier: "true",
                 position: (48, 29),
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "TimeoutSec",
                   position: (49, 11),
                  },
                 ],
                },
                to: Int {
                 value: 180,
                 position: (49, 24),
                },
               },
              ],
              recursive: false,
              position: (47, 9),
             },
            },
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "script",
                position: (52, 7),
               },
              ],
             },
             to: String {
              parts: [
               Raw {
                content: "",
                position: (53, 1),
               },
               Interpolation {
                expression: PropertyAccess {
                 expression: Variable {
                  identifier: "pkgs",
                  position: (53, 11),
                 },
                 attribute_path: AttributePath {
                  parts: [
                   Raw {
                    content: "udev",
                    position: (53, 16),
                   },
                  ],
                 },
                 default: None,
                },
               },
               Raw {
                content: "/bin/udevadm settle\necho -n 1 >/proc/sys/kernel/modules_disabled\n",
                position: (53, 21),
               },
              ],
              position: (52, 16),
             },
            },
           ],
           recursive: false,
           position: (32, 54),
          },
         },
        ],
        recursive: false,
        position: (23, 51),
       },
      ],
     },
    },
   ],
   recursive: false,
   position: (5, 1),
  },
  position: (3, 1),
 },
 position: (1, 1),
}