Function( Function { head: Destructured( FunctionHeadDestructured { ellipsis: true, identifier: None, arguments: [ FunctionHeadDestructuredArgument { identifier: "config", default: None, }, FunctionHeadDestructuredArgument { identifier: "lib", default: None, }, FunctionHeadDestructuredArgument { identifier: "pkgs", default: None, }, ], }, ), body: With( With { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 3, column: 6, }, end: Position { line: 3, column: 9, }, }, }, ), target: LetIn( LetIn { bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "cfg", span: Span { start: Position { line: 6, column: 3, }, end: Position { line: 6, column: 6, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "config", span: Span { start: Position { line: 6, column: 9, }, end: Position { line: 6, column: 15, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 6, column: 16, }, end: Position { line: 6, column: 24, }, }, }, ), Raw( PartRaw { content: "duosec", span: Span { start: Position { line: 6, column: 25, }, end: Position { line: 6, column: 31, }, }, }, ), ], default: None, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "boolToStr", span: Span { start: Position { line: 8, column: 3, }, end: Position { line: 8, column: 12, }, }, }, ), ], to: Function( Function { head: Simple( FunctionHeadSimple { identifier: "b", }, ), body: IfThenElse( IfThenElse { predicate: Identifier( Identifier { id: "b", span: Span { start: Position { line: 8, column: 21, }, end: Position { line: 8, column: 22, }, }, }, ), then: String( String_ { parts: [ Raw( PartRaw { content: "yes", span: Span { start: Position { line: 8, column: 29, }, end: Position { line: 8, column: 32, }, }, }, ), ], span: Span { start: Position { line: 8, column: 28, }, end: Position { line: 8, column: 33, }, }, }, ), else_: String( String_ { parts: [ Raw( PartRaw { content: "no", span: Span { start: Position { line: 8, column: 40, }, end: Position { line: 8, column: 42, }, }, }, ), ], span: Span { start: Position { line: 8, column: 39, }, end: Position { line: 8, column: 43, }, }, }, ), span: Span { start: Position { line: 8, column: 18, }, end: Position { line: 8, column: 43, }, }, }, ), span: Span { start: Position { line: 8, column: 15, }, end: Position { line: 8, column: 43, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "configFilePam", span: Span { start: Position { line: 10, column: 3, }, end: Position { line: 10, column: 16, }, }, }, ), ], to: IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "[duo]\nikey=", span: Span { start: Position { line: 11, column: 1, }, end: Position { line: 12, column: 10, }, }, }, ), Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 12, column: 12, }, end: Position { line: 12, column: 15, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "integrationKey", span: Span { start: Position { line: 12, column: 16, }, end: Position { line: 12, column: 30, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "\nhost=", span: Span { start: Position { line: 11, column: 1, }, end: Position { line: 13, column: 10, }, }, }, ), Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 13, column: 12, }, end: Position { line: 13, column: 15, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "host", span: Span { start: Position { line: 13, column: 16, }, end: Position { line: 13, column: 20, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "\n", span: Span { start: Position { line: 11, column: 1, }, end: Position { line: 14, column: 5, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "optionalString", span: Span { start: Position { line: 14, column: 7, }, end: Position { line: 14, column: 21, }, }, }, ), arguments: [ BinaryOperation( BinaryOperation { left: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 14, column: 23, }, end: Position { line: 14, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "groups", span: Span { start: Position { line: 14, column: 27, }, end: Position { line: 14, column: 33, }, }, }, ), ], default: None, }, ), operator: NotEqualTo, right: String( String_ { parts: [], span: Span { start: Position { line: 14, column: 37, }, end: Position { line: 14, column: 39, }, }, }, ), }, ), BinaryOperation( BinaryOperation { left: String( String_ { parts: [ Raw( PartRaw { content: "groups=", span: Span { start: Position { line: 14, column: 43, }, end: Position { line: 14, column: 50, }, }, }, ), ], span: Span { start: Position { line: 14, column: 42, }, end: Position { line: 14, column: 51, }, }, }, ), operator: Addition, right: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 14, column: 52, }, end: Position { line: 14, column: 55, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "groups", span: Span { start: Position { line: 14, column: 56, }, end: Position { line: 14, column: 62, }, }, }, ), ], default: None, }, ), }, ), ], }, ), }, ), Raw( PartRaw { content: "\nfailmode=", span: Span { start: Position { line: 11, column: 1, }, end: Position { line: 15, column: 14, }, }, }, ), Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 15, column: 16, }, end: Position { line: 15, column: 19, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "failmode", span: Span { start: Position { line: 15, column: 20, }, end: Position { line: 15, column: 28, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "\npushinfo=", span: Span { start: Position { line: 11, column: 1, }, end: Position { line: 16, column: 14, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "boolToStr", span: Span { start: Position { line: 16, column: 16, }, end: Position { line: 16, column: 25, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 16, column: 26, }, end: Position { line: 16, column: 29, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "pushinfo", span: Span { start: Position { line: 16, column: 30, }, end: Position { line: 16, column: 38, }, }, }, ), ], default: None, }, ), ], }, ), }, ), Raw( PartRaw { content: "\nautopush=", span: Span { start: Position { line: 11, column: 1, }, end: Position { line: 17, column: 14, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "boolToStr", span: Span { start: Position { line: 17, column: 16, }, end: Position { line: 17, column: 25, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 17, column: 26, }, end: Position { line: 17, column: 29, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "autopush", span: Span { start: Position { line: 17, column: 30, }, end: Position { line: 17, column: 38, }, }, }, ), ], default: None, }, ), ], }, ), }, ), Raw( PartRaw { content: "\nprompts=", span: Span { start: Position { line: 11, column: 1, }, end: Position { line: 18, column: 13, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "toString", span: Span { start: Position { line: 18, column: 15, }, end: Position { line: 18, column: 23, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 18, column: 24, }, end: Position { line: 18, column: 27, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "prompts", span: Span { start: Position { line: 18, column: 28, }, end: Position { line: 18, column: 35, }, }, }, ), ], default: None, }, ), ], }, ), }, ), Raw( PartRaw { content: "\nfallback_local_ip=", span: Span { start: Position { line: 11, column: 1, }, end: Position { line: 19, column: 23, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "boolToStr", span: Span { start: Position { line: 19, column: 25, }, end: Position { line: 19, column: 34, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 19, column: 35, }, end: Position { line: 19, column: 38, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "fallbackLocalIP", span: Span { start: Position { line: 19, column: 39, }, end: Position { line: 19, column: 54, }, }, }, ), ], default: None, }, ), ], }, ), }, ), Raw( PartRaw { content: "\n", span: Span { start: Position { line: 11, column: 1, }, end: Position { line: 20, column: 3, }, }, }, ), ], span: Span { start: Position { line: 10, column: 19, }, end: Position { line: 20, column: 5, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "configFileLogin", span: Span { start: Position { line: 22, column: 3, }, end: Position { line: 22, column: 18, }, }, }, ), ], to: BinaryOperation( BinaryOperation { left: Identifier( Identifier { id: "configFilePam", span: Span { start: Position { line: 22, column: 21, }, end: Position { line: 22, column: 34, }, }, }, ), operator: Addition, right: IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "motd=", span: Span { start: Position { line: 23, column: 1, }, end: Position { line: 23, column: 10, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "boolToStr", span: Span { start: Position { line: 23, column: 12, }, end: Position { line: 23, column: 21, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 23, column: 22, }, end: Position { line: 23, column: 25, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "motd", span: Span { start: Position { line: 23, column: 26, }, end: Position { line: 23, column: 30, }, }, }, ), ], default: None, }, ), ], }, ), }, ), Raw( PartRaw { content: "\naccept_env_factor=", span: Span { start: Position { line: 23, column: 1, }, end: Position { line: 24, column: 23, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "boolToStr", span: Span { start: Position { line: 24, column: 25, }, end: Position { line: 24, column: 34, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 24, column: 35, }, end: Position { line: 24, column: 38, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "acceptEnvFactor", span: Span { start: Position { line: 24, column: 39, }, end: Position { line: 24, column: 54, }, }, }, ), ], default: None, }, ), ], }, ), }, ), Raw( PartRaw { content: "\n", span: Span { start: Position { line: 23, column: 1, }, end: Position { line: 25, column: 3, }, }, }, ), ], span: Span { start: Position { line: 22, column: 37, }, end: Position { line: 25, column: 5, }, }, }, ), }, ), }, ), ], target: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "imports", span: Span { start: Position { line: 28, column: 3, }, end: Position { line: 28, column: 10, }, }, }, ), ], to: List( List { elements: [ FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkRenamedOptionModule", span: Span { start: Position { line: 29, column: 6, }, end: Position { line: 29, column: 27, }, }, }, ), arguments: [ List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 29, column: 31, }, end: Position { line: 29, column: 39, }, }, }, ), ], span: Span { start: Position { line: 29, column: 30, }, end: Position { line: 29, column: 40, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "duosec", span: Span { start: Position { line: 29, column: 42, }, end: Position { line: 29, column: 48, }, }, }, ), ], span: Span { start: Position { line: 29, column: 41, }, end: Position { line: 29, column: 49, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "group", span: Span { start: Position { line: 29, column: 51, }, end: Position { line: 29, column: 56, }, }, }, ), ], span: Span { start: Position { line: 29, column: 50, }, end: Position { line: 29, column: 57, }, }, }, ), ], span: Span { start: Position { line: 29, column: 28, }, end: Position { line: 29, column: 59, }, }, }, ), List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 29, column: 63, }, end: Position { line: 29, column: 71, }, }, }, ), ], span: Span { start: Position { line: 29, column: 62, }, end: Position { line: 29, column: 72, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "duosec", span: Span { start: Position { line: 29, column: 74, }, end: Position { line: 29, column: 80, }, }, }, ), ], span: Span { start: Position { line: 29, column: 73, }, end: Position { line: 29, column: 81, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "groups", span: Span { start: Position { line: 29, column: 83, }, end: Position { line: 29, column: 89, }, }, }, ), ], span: Span { start: Position { line: 29, column: 82, }, end: Position { line: 29, column: 90, }, }, }, ), ], span: Span { start: Position { line: 29, column: 60, }, end: Position { line: 29, column: 92, }, }, }, ), ], }, ), FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkRenamedOptionModule", span: Span { start: Position { line: 30, column: 6, }, end: Position { line: 30, column: 27, }, }, }, ), arguments: [ List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 30, column: 31, }, end: Position { line: 30, column: 39, }, }, }, ), ], span: Span { start: Position { line: 30, column: 30, }, end: Position { line: 30, column: 40, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "duosec", span: Span { start: Position { line: 30, column: 42, }, end: Position { line: 30, column: 48, }, }, }, ), ], span: Span { start: Position { line: 30, column: 41, }, end: Position { line: 30, column: 49, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "ikey", span: Span { start: Position { line: 30, column: 51, }, end: Position { line: 30, column: 55, }, }, }, ), ], span: Span { start: Position { line: 30, column: 50, }, end: Position { line: 30, column: 56, }, }, }, ), ], span: Span { start: Position { line: 30, column: 28, }, end: Position { line: 30, column: 58, }, }, }, ), List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 30, column: 62, }, end: Position { line: 30, column: 70, }, }, }, ), ], span: Span { start: Position { line: 30, column: 61, }, end: Position { line: 30, column: 71, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "duosec", span: Span { start: Position { line: 30, column: 73, }, end: Position { line: 30, column: 79, }, }, }, ), ], span: Span { start: Position { line: 30, column: 72, }, end: Position { line: 30, column: 80, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "integrationKey", span: Span { start: Position { line: 30, column: 82, }, end: Position { line: 30, column: 96, }, }, }, ), ], span: Span { start: Position { line: 30, column: 81, }, end: Position { line: 30, column: 97, }, }, }, ), ], span: Span { start: Position { line: 30, column: 59, }, end: Position { line: 30, column: 99, }, }, }, ), ], }, ), FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkRemovedOptionModule", span: Span { start: Position { line: 31, column: 6, }, end: Position { line: 31, column: 27, }, }, }, ), arguments: [ List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 31, column: 31, }, end: Position { line: 31, column: 39, }, }, }, ), ], span: Span { start: Position { line: 31, column: 30, }, end: Position { line: 31, column: 40, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "duosec", span: Span { start: Position { line: 31, column: 42, }, end: Position { line: 31, column: 48, }, }, }, ), ], span: Span { start: Position { line: 31, column: 41, }, end: Position { line: 31, column: 49, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "skey", span: Span { start: Position { line: 31, column: 51, }, end: Position { line: 31, column: 55, }, }, }, ), ], span: Span { start: Position { line: 31, column: 50, }, end: Position { line: 31, column: 56, }, }, }, ), ], span: Span { start: Position { line: 31, column: 28, }, end: Position { line: 31, column: 58, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "The insecure security.duosec.skey option has been replaced by a new security.duosec.secretKeyFile option. Use this new option to store a secure copy of your key instead.", span: Span { start: Position { line: 31, column: 60, }, end: Position { line: 31, column: 229, }, }, }, ), ], span: Span { start: Position { line: 31, column: 59, }, end: Position { line: 31, column: 230, }, }, }, ), ], }, ), ], span: Span { start: Position { line: 28, column: 13, }, end: Position { line: 32, column: 4, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "options", span: Span { start: Position { line: 34, column: 3, }, end: Position { line: 34, column: 10, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 35, column: 5, }, end: Position { line: 35, column: 13, }, }, }, ), Raw( PartRaw { content: "duosec", span: Span { start: Position { line: 35, column: 14, }, end: Position { line: 35, column: 20, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ssh", span: Span { start: Position { line: 36, column: 7, }, end: Position { line: 36, column: 10, }, }, }, ), Raw( PartRaw { content: "enable", span: Span { start: Position { line: 36, column: 11, }, end: Position { line: 36, column: 17, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 36, column: 20, }, end: Position { line: 36, column: 28, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 37, column: 9, }, end: Position { line: 37, column: 13, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 37, column: 16, }, end: Position { line: 37, column: 21, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "bool", span: Span { start: Position { line: 37, column: 22, }, end: Position { line: 37, column: 26, }, }, }, ), ], default: None, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 38, column: 9, }, end: Position { line: 38, column: 16, }, }, }, ), ], to: Identifier( Identifier { id: "false", span: Span { start: Position { line: 38, column: 19, }, end: Position { line: 38, column: 24, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 39, column: 9, }, end: Position { line: 39, column: 20, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 39, column: 23, }, end: Position { line: 39, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 39, column: 27, }, end: Position { line: 39, column: 32, }, }, }, ), ], default: None, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "If enabled, protect SSH logins with Duo Security.", span: Span { start: Position { line: 39, column: 34, }, end: Position { line: 39, column: 83, }, }, }, ), ], span: Span { start: Position { line: 39, column: 33, }, end: Position { line: 39, column: 84, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 36, column: 29, }, end: Position { line: 40, column: 8, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "pam", span: Span { start: Position { line: 42, column: 7, }, end: Position { line: 42, column: 10, }, }, }, ), Raw( PartRaw { content: "enable", span: Span { start: Position { line: 42, column: 11, }, end: Position { line: 42, column: 17, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 42, column: 20, }, end: Position { line: 42, column: 28, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 43, column: 9, }, end: Position { line: 43, column: 13, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 43, column: 16, }, end: Position { line: 43, column: 21, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "bool", span: Span { start: Position { line: 43, column: 22, }, end: Position { line: 43, column: 26, }, }, }, ), ], default: None, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 44, column: 9, }, end: Position { line: 44, column: 16, }, }, }, ), ], to: Identifier( Identifier { id: "false", span: Span { start: Position { line: 44, column: 19, }, end: Position { line: 44, column: 24, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 45, column: 9, }, end: Position { line: 45, column: 20, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 45, column: 23, }, end: Position { line: 45, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 45, column: 27, }, end: Position { line: 45, column: 32, }, }, }, ), ], default: None, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "If enabled, protect logins with Duo Security using PAM support.", span: Span { start: Position { line: 45, column: 34, }, end: Position { line: 45, column: 97, }, }, }, ), ], span: Span { start: Position { line: 45, column: 33, }, end: Position { line: 45, column: 98, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 42, column: 29, }, end: Position { line: 46, column: 8, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "integrationKey", span: Span { start: Position { line: 48, column: 7, }, end: Position { line: 48, column: 21, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 48, column: 24, }, end: Position { line: 48, column: 32, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 49, column: 9, }, end: Position { line: 49, column: 13, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 49, column: 16, }, end: Position { line: 49, column: 21, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "str", span: Span { start: Position { line: 49, column: 22, }, end: Position { line: 49, column: 25, }, }, }, ), ], default: None, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 50, column: 9, }, end: Position { line: 50, column: 20, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 50, column: 23, }, end: Position { line: 50, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 50, column: 27, }, end: Position { line: 50, column: 32, }, }, }, ), ], default: None, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "Integration key.", span: Span { start: Position { line: 50, column: 34, }, end: Position { line: 50, column: 50, }, }, }, ), ], span: Span { start: Position { line: 50, column: 33, }, end: Position { line: 50, column: 51, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 48, column: 33, }, end: Position { line: 51, column: 8, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "secretKeyFile", span: Span { start: Position { line: 53, column: 7, }, end: Position { line: 53, column: 20, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 53, column: 23, }, end: Position { line: 53, column: 31, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 54, column: 9, }, end: Position { line: 54, column: 13, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 54, column: 16, }, end: Position { line: 54, column: 21, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "nullOr", span: Span { start: Position { line: 54, column: 22, }, end: Position { line: 54, column: 28, }, }, }, ), ], default: None, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 54, column: 29, }, end: Position { line: 54, column: 34, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "path", span: Span { start: Position { line: 54, column: 35, }, end: Position { line: 54, column: 39, }, }, }, ), ], default: None, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 55, column: 9, }, end: Position { line: 55, column: 16, }, }, }, ), ], to: Identifier( Identifier { id: "null", span: Span { start: Position { line: 55, column: 19, }, end: Position { line: 55, column: 23, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 56, column: 9, }, end: Position { line: 56, column: 20, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 56, column: 23, }, end: Position { line: 56, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 56, column: 27, }, end: Position { line: 56, column: 32, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "A file containing your secret key. The security of your Duo application is tied to the security of your secret key.\n", span: Span { start: Position { line: 57, column: 1, }, end: Position { line: 58, column: 9, }, }, }, ), ], span: Span { start: Position { line: 56, column: 33, }, end: Position { line: 58, column: 11, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "example", span: Span { start: Position { line: 59, column: 9, }, end: Position { line: 59, column: 16, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "/run/keys/duo-skey", span: Span { start: Position { line: 59, column: 20, }, end: Position { line: 59, column: 38, }, }, }, ), ], span: Span { start: Position { line: 59, column: 19, }, end: Position { line: 59, column: 39, }, }, }, ), }, ), ], span: Span { start: Position { line: 53, column: 32, }, end: Position { line: 60, column: 8, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "host", span: Span { start: Position { line: 62, column: 7, }, end: Position { line: 62, column: 11, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 62, column: 14, }, end: Position { line: 62, column: 22, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 63, column: 9, }, end: Position { line: 63, column: 13, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 63, column: 16, }, end: Position { line: 63, column: 21, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "str", span: Span { start: Position { line: 63, column: 22, }, end: Position { line: 63, column: 25, }, }, }, ), ], default: None, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 64, column: 9, }, end: Position { line: 64, column: 20, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 64, column: 23, }, end: Position { line: 64, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 64, column: 27, }, end: Position { line: 64, column: 32, }, }, }, ), ], default: None, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "Duo API hostname.", span: Span { start: Position { line: 64, column: 34, }, end: Position { line: 64, column: 51, }, }, }, ), ], span: Span { start: Position { line: 64, column: 33, }, end: Position { line: 64, column: 52, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 62, column: 23, }, end: Position { line: 65, column: 8, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "groups", span: Span { start: Position { line: 67, column: 7, }, end: Position { line: 67, column: 13, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 67, column: 16, }, end: Position { line: 67, column: 24, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 68, column: 9, }, end: Position { line: 68, column: 13, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 68, column: 16, }, end: Position { line: 68, column: 21, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "str", span: Span { start: Position { line: 68, column: 22, }, end: Position { line: 68, column: 25, }, }, }, ), ], default: None, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 69, column: 9, }, end: Position { line: 69, column: 16, }, }, }, ), ], to: String( String_ { parts: [], span: Span { start: Position { line: 69, column: 19, }, end: Position { line: 69, column: 21, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "example", span: Span { start: Position { line: 70, column: 9, }, end: Position { line: 70, column: 16, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "users,!wheel,!*admin guests", span: Span { start: Position { line: 70, column: 20, }, end: Position { line: 70, column: 47, }, }, }, ), ], span: Span { start: Position { line: 70, column: 19, }, end: Position { line: 70, column: 48, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 71, column: 9, }, end: Position { line: 71, column: 20, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 71, column: 23, }, end: Position { line: 71, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 71, column: 27, }, end: Position { line: 71, column: 32, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "If specified, Duo authentication is required only for users\nwhose primary group or supplementary group list matches one\nof the space-separated pattern lists. Refer to\n for details.\n", span: Span { start: Position { line: 72, column: 1, }, end: Position { line: 76, column: 9, }, }, }, ), ], span: Span { start: Position { line: 71, column: 33, }, end: Position { line: 76, column: 11, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 67, column: 25, }, end: Position { line: 77, column: 8, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "failmode", span: Span { start: Position { line: 79, column: 7, }, end: Position { line: 79, column: 15, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 79, column: 18, }, end: Position { line: 79, column: 26, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 80, column: 9, }, end: Position { line: 80, column: 13, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 80, column: 16, }, end: Position { line: 80, column: 21, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "enum", span: Span { start: Position { line: 80, column: 22, }, end: Position { line: 80, column: 26, }, }, }, ), ], default: None, }, ), arguments: [ List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "safe", span: Span { start: Position { line: 80, column: 30, }, end: Position { line: 80, column: 34, }, }, }, ), ], span: Span { start: Position { line: 80, column: 29, }, end: Position { line: 80, column: 35, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "secure", span: Span { start: Position { line: 80, column: 37, }, end: Position { line: 80, column: 43, }, }, }, ), ], span: Span { start: Position { line: 80, column: 36, }, end: Position { line: 80, column: 44, }, }, }, ), ], span: Span { start: Position { line: 80, column: 27, }, end: Position { line: 80, column: 46, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 81, column: 9, }, end: Position { line: 81, column: 16, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "safe", span: Span { start: Position { line: 81, column: 20, }, end: Position { line: 81, column: 24, }, }, }, ), ], span: Span { start: Position { line: 81, column: 19, }, end: Position { line: 81, column: 25, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 82, column: 9, }, end: Position { line: 82, column: 20, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 82, column: 23, }, end: Position { line: 82, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 82, column: 27, }, end: Position { line: 82, column: 32, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "On service or configuration errors that prevent Duo\nauthentication, fail \"safe\" (allow access) or \"secure\" (deny\naccess). The default is \"safe\".\n", span: Span { start: Position { line: 83, column: 1, }, end: Position { line: 86, column: 9, }, }, }, ), ], span: Span { start: Position { line: 82, column: 33, }, end: Position { line: 86, column: 11, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 79, column: 27, }, end: Position { line: 87, column: 8, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "pushinfo", span: Span { start: Position { line: 89, column: 7, }, end: Position { line: 89, column: 15, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 89, column: 18, }, end: Position { line: 89, column: 26, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 90, column: 9, }, end: Position { line: 90, column: 13, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 90, column: 16, }, end: Position { line: 90, column: 21, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "bool", span: Span { start: Position { line: 90, column: 22, }, end: Position { line: 90, column: 26, }, }, }, ), ], default: None, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 91, column: 9, }, end: Position { line: 91, column: 16, }, }, }, ), ], to: Identifier( Identifier { id: "false", span: Span { start: Position { line: 91, column: 19, }, end: Position { line: 91, column: 24, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 92, column: 9, }, end: Position { line: 92, column: 20, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 92, column: 23, }, end: Position { line: 92, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 92, column: 27, }, end: Position { line: 92, column: 32, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "Include information such as the command to be executed in\nthe Duo Push message.\n", span: Span { start: Position { line: 93, column: 1, }, end: Position { line: 95, column: 9, }, }, }, ), ], span: Span { start: Position { line: 92, column: 33, }, end: Position { line: 95, column: 11, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 89, column: 27, }, end: Position { line: 96, column: 8, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "autopush", span: Span { start: Position { line: 98, column: 7, }, end: Position { line: 98, column: 15, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 98, column: 18, }, end: Position { line: 98, column: 26, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 99, column: 9, }, end: Position { line: 99, column: 13, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 99, column: 16, }, end: Position { line: 99, column: 21, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "bool", span: Span { start: Position { line: 99, column: 22, }, end: Position { line: 99, column: 26, }, }, }, ), ], default: None, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 100, column: 9, }, end: Position { line: 100, column: 16, }, }, }, ), ], to: Identifier( Identifier { id: "false", span: Span { start: Position { line: 100, column: 19, }, end: Position { line: 100, column: 24, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 101, column: 9, }, end: Position { line: 101, column: 20, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 101, column: 23, }, end: Position { line: 101, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 101, column: 27, }, end: Position { line: 101, column: 32, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "If `true`, Duo Unix will automatically send\na push login request to the user’s phone, falling back on a\nphone call if push is unavailable. If\n`false`, the user will be prompted to\nchoose an authentication method. When configured with\n`autopush = yes`, we recommend setting\n`prompts = 1`.\n", span: Span { start: Position { line: 102, column: 1, }, end: Position { line: 109, column: 9, }, }, }, ), ], span: Span { start: Position { line: 101, column: 33, }, end: Position { line: 109, column: 11, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 98, column: 27, }, end: Position { line: 110, column: 8, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "motd", span: Span { start: Position { line: 112, column: 7, }, end: Position { line: 112, column: 11, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 112, column: 14, }, end: Position { line: 112, column: 22, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 113, column: 9, }, end: Position { line: 113, column: 13, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 113, column: 16, }, end: Position { line: 113, column: 21, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "bool", span: Span { start: Position { line: 113, column: 22, }, end: Position { line: 113, column: 26, }, }, }, ), ], default: None, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 114, column: 9, }, end: Position { line: 114, column: 16, }, }, }, ), ], to: Identifier( Identifier { id: "false", span: Span { start: Position { line: 114, column: 19, }, end: Position { line: 114, column: 24, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 115, column: 9, }, end: Position { line: 115, column: 20, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 115, column: 23, }, end: Position { line: 115, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 115, column: 27, }, end: Position { line: 115, column: 32, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "Print the contents of `/etc/motd` to screen\nafter a successful login.\n", span: Span { start: Position { line: 116, column: 1, }, end: Position { line: 118, column: 9, }, }, }, ), ], span: Span { start: Position { line: 115, column: 33, }, end: Position { line: 118, column: 11, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 112, column: 23, }, end: Position { line: 119, column: 8, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "prompts", span: Span { start: Position { line: 121, column: 7, }, end: Position { line: 121, column: 14, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 121, column: 17, }, end: Position { line: 121, column: 25, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 122, column: 9, }, end: Position { line: 122, column: 13, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 122, column: 16, }, end: Position { line: 122, column: 21, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "enum", span: Span { start: Position { line: 122, column: 22, }, end: Position { line: 122, column: 26, }, }, }, ), ], default: None, }, ), arguments: [ List( List { elements: [ Integer( Integer { value: "1", span: Span { start: Position { line: 122, column: 29, }, end: Position { line: 122, column: 30, }, }, }, ), Integer( Integer { value: "2", span: Span { start: Position { line: 122, column: 31, }, end: Position { line: 122, column: 32, }, }, }, ), Integer( Integer { value: "3", span: Span { start: Position { line: 122, column: 33, }, end: Position { line: 122, column: 34, }, }, }, ), ], span: Span { start: Position { line: 122, column: 27, }, end: Position { line: 122, column: 36, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 123, column: 9, }, end: Position { line: 123, column: 16, }, }, }, ), ], to: Integer( Integer { value: "3", span: Span { start: Position { line: 123, column: 19, }, end: Position { line: 123, column: 20, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 124, column: 9, }, end: Position { line: 124, column: 20, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 124, column: 23, }, end: Position { line: 124, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 124, column: 27, }, end: Position { line: 124, column: 32, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "If a user fails to authenticate with a second factor, Duo\nUnix will prompt the user to authenticate again. This option\nsets the maximum number of prompts that Duo Unix will\ndisplay before denying access. Must be 1, 2, or 3. Default\nis 3.\n\nFor example, when `prompts = 1`, the user\nwill have to successfully authenticate on the first prompt,\nwhereas if `prompts = 2`, if the user\nenters incorrect information at the initial prompt, he/she\nwill be prompted to authenticate again.\n\nWhen configured with `autopush = true`, we\nrecommend setting `prompts = 1`.\n", span: Span { start: Position { line: 125, column: 1, }, end: Position { line: 139, column: 9, }, }, }, ), ], span: Span { start: Position { line: 124, column: 33, }, end: Position { line: 139, column: 11, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 121, column: 26, }, end: Position { line: 140, column: 8, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "acceptEnvFactor", span: Span { start: Position { line: 142, column: 7, }, end: Position { line: 142, column: 22, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 142, column: 25, }, end: Position { line: 142, column: 33, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 143, column: 9, }, end: Position { line: 143, column: 13, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 143, column: 16, }, end: Position { line: 143, column: 21, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "bool", span: Span { start: Position { line: 143, column: 22, }, end: Position { line: 143, column: 26, }, }, }, ), ], default: None, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 144, column: 9, }, end: Position { line: 144, column: 16, }, }, }, ), ], to: Identifier( Identifier { id: "false", span: Span { start: Position { line: 144, column: 19, }, end: Position { line: 144, column: 24, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 145, column: 9, }, end: Position { line: 145, column: 20, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 145, column: 23, }, end: Position { line: 145, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 145, column: 27, }, end: Position { line: 145, column: 32, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "Look for factor selection or passcode in the\n`$DUO_PASSCODE` environment variable before\nprompting the user for input.\n\nWhen $DUO_PASSCODE is non-empty, it will override\nautopush. The SSH client will need SendEnv DUO_PASSCODE in\nits configuration, and the SSH server will similarly need\nAcceptEnv DUO_PASSCODE.\n", span: Span { start: Position { line: 146, column: 1, }, end: Position { line: 154, column: 9, }, }, }, ), ], span: Span { start: Position { line: 145, column: 33, }, end: Position { line: 154, column: 11, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 142, column: 34, }, end: Position { line: 155, column: 8, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "fallbackLocalIP", span: Span { start: Position { line: 157, column: 7, }, end: Position { line: 157, column: 22, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 157, column: 25, }, end: Position { line: 157, column: 33, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 158, column: 9, }, end: Position { line: 158, column: 13, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 158, column: 16, }, end: Position { line: 158, column: 21, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "bool", span: Span { start: Position { line: 158, column: 22, }, end: Position { line: 158, column: 26, }, }, }, ), ], default: None, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 159, column: 9, }, end: Position { line: 159, column: 16, }, }, }, ), ], to: Identifier( Identifier { id: "false", span: Span { start: Position { line: 159, column: 19, }, end: Position { line: 159, column: 24, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 160, column: 9, }, end: Position { line: 160, column: 20, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 160, column: 23, }, end: Position { line: 160, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 160, column: 27, }, end: Position { line: 160, column: 32, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "Duo Unix reports the IP address of the authorizing user, for\nthe purposes of authorization and whitelisting. If Duo Unix\ncannot detect the IP address of the client, setting\n`fallbackLocalIP = yes` will cause Duo Unix\nto send the IP address of the server it is running on.\n\nIf you are using IP whitelisting, enabling this option could\ncause unauthorized logins if the local IP is listed in the\nwhitelist.\n", span: Span { start: Position { line: 161, column: 1, }, end: Position { line: 170, column: 9, }, }, }, ), ], span: Span { start: Position { line: 160, column: 33, }, end: Position { line: 170, column: 11, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 157, column: 34, }, end: Position { line: 171, column: 8, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "allowTcpForwarding", span: Span { start: Position { line: 173, column: 7, }, end: Position { line: 173, column: 25, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 173, column: 28, }, end: Position { line: 173, column: 36, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 174, column: 9, }, end: Position { line: 174, column: 13, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 174, column: 16, }, end: Position { line: 174, column: 21, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "bool", span: Span { start: Position { line: 174, column: 22, }, end: Position { line: 174, column: 26, }, }, }, ), ], default: None, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 175, column: 9, }, end: Position { line: 175, column: 16, }, }, }, ), ], to: Identifier( Identifier { id: "false", span: Span { start: Position { line: 175, column: 19, }, end: Position { line: 175, column: 24, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 176, column: 9, }, end: Position { line: 176, column: 20, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 176, column: 23, }, end: Position { line: 176, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 176, column: 27, }, end: Position { line: 176, column: 32, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "By default, when SSH forwarding, enabling Duo Security will\ndisable TCP forwarding. By enabling this, you potentially\nundermine some of the SSH based login security. Note this is\nnot needed if you use PAM.\n", span: Span { start: Position { line: 177, column: 1, }, end: Position { line: 181, column: 9, }, }, }, ), ], span: Span { start: Position { line: 176, column: 33, }, end: Position { line: 181, column: 11, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 173, column: 37, }, end: Position { line: 182, column: 8, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 35, column: 23, }, end: Position { line: 183, column: 6, }, }, }, ), }, ), ], span: Span { start: Position { line: 34, column: 13, }, end: Position { line: 184, column: 4, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "config", span: Span { start: Position { line: 186, column: 3, }, end: Position { line: 186, column: 9, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkIf", span: Span { start: Position { line: 186, column: 12, }, end: Position { line: 186, column: 16, }, }, }, ), arguments: [ BinaryOperation( BinaryOperation { left: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 186, column: 18, }, end: Position { line: 186, column: 21, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "ssh", span: Span { start: Position { line: 186, column: 22, }, end: Position { line: 186, column: 25, }, }, }, ), Raw( PartRaw { content: "enable", span: Span { start: Position { line: 186, column: 26, }, end: Position { line: 186, column: 32, }, }, }, ), ], default: None, }, ), operator: LogicalOr, right: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 186, column: 36, }, end: Position { line: 186, column: 39, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "pam", span: Span { start: Position { line: 186, column: 40, }, end: Position { line: 186, column: 43, }, }, }, ), Raw( PartRaw { content: "enable", span: Span { start: Position { line: 186, column: 44, }, end: Position { line: 186, column: 50, }, }, }, ), ], default: None, }, ), }, ), Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "environment", span: Span { start: Position { line: 187, column: 5, }, end: Position { line: 187, column: 16, }, }, }, ), Raw( PartRaw { content: "systemPackages", span: Span { start: Position { line: 187, column: 17, }, end: Position { line: 187, column: 31, }, }, }, ), ], to: List( List { elements: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 187, column: 36, }, end: Position { line: 187, column: 40, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "duo-unix", span: Span { start: Position { line: 187, column: 41, }, end: Position { line: 187, column: 49, }, }, }, ), ], default: None, }, ), ], span: Span { start: Position { line: 187, column: 34, }, end: Position { line: 187, column: 51, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 189, column: 5, }, end: Position { line: 189, column: 13, }, }, }, ), Raw( PartRaw { content: "wrappers", span: Span { start: Position { line: 189, column: 14, }, end: Position { line: 189, column: 22, }, }, }, ), Raw( PartRaw { content: "login_duo", span: Span { start: Position { line: 189, column: 23, }, end: Position { line: 189, column: 32, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "setuid", span: Span { start: Position { line: 190, column: 9, }, end: Position { line: 190, column: 15, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 190, column: 18, }, end: Position { line: 190, column: 22, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "owner", span: Span { start: Position { line: 191, column: 9, }, end: Position { line: 191, column: 14, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "root", span: Span { start: Position { line: 191, column: 18, }, end: Position { line: 191, column: 22, }, }, }, ), ], span: Span { start: Position { line: 191, column: 17, }, end: Position { line: 191, column: 23, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "group", span: Span { start: Position { line: 192, column: 9, }, end: Position { line: 192, column: 14, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "root", span: Span { start: Position { line: 192, column: 18, }, end: Position { line: 192, column: 22, }, }, }, ), ], span: Span { start: Position { line: 192, column: 17, }, end: Position { line: 192, column: 23, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "source", span: Span { start: Position { line: 193, column: 9, }, end: Position { line: 193, column: 15, }, }, }, ), ], to: String( String_ { parts: [ Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 193, column: 21, }, end: Position { line: 193, column: 25, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "duo-unix", span: Span { start: Position { line: 193, column: 26, }, end: Position { line: 193, column: 34, }, }, }, ), Raw( PartRaw { content: "out", span: Span { start: Position { line: 193, column: 35, }, end: Position { line: 193, column: 38, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "/bin/login_duo", span: Span { start: Position { line: 193, column: 19, }, end: Position { line: 193, column: 53, }, }, }, ), ], span: Span { start: Position { line: 193, column: 18, }, end: Position { line: 193, column: 54, }, }, }, ), }, ), ], span: Span { start: Position { line: 190, column: 7, }, end: Position { line: 194, column: 8, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "system", span: Span { start: Position { line: 196, column: 5, }, end: Position { line: 196, column: 11, }, }, }, ), Raw( PartRaw { content: "activationScripts", span: Span { start: Position { line: 196, column: 12, }, end: Position { line: 196, column: 29, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "login_duo", span: Span { start: Position { line: 197, column: 7, }, end: Position { line: 197, column: 16, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkIf", span: Span { start: Position { line: 197, column: 19, }, end: Position { line: 197, column: 23, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 197, column: 24, }, end: Position { line: 197, column: 27, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "ssh", span: Span { start: Position { line: 197, column: 28, }, end: Position { line: 197, column: 31, }, }, }, ), Raw( PartRaw { content: "enable", span: Span { start: Position { line: 197, column: 32, }, end: Position { line: 197, column: 38, }, }, }, ), ], default: None, }, ), IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "if test -f \"", span: Span { start: Position { line: 198, column: 1, }, end: Position { line: 198, column: 21, }, }, }, ), Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 198, column: 23, }, end: Position { line: 198, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "secretKeyFile", span: Span { start: Position { line: 198, column: 27, }, end: Position { line: 198, column: 40, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "\"; then\n mkdir -m 0755 -p /etc/duo\n\n umask 0077\n conf=\"$(mktemp)\"\n {\n cat ", span: Span { start: Position { line: 198, column: 1, }, end: Position { line: 204, column: 17, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 204, column: 19, }, end: Position { line: 204, column: 23, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "writeText", span: Span { start: Position { line: 204, column: 24, }, end: Position { line: 204, column: 33, }, }, }, ), ], default: None, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "login_duo.conf", span: Span { start: Position { line: 204, column: 35, }, end: Position { line: 204, column: 49, }, }, }, ), ], span: Span { start: Position { line: 204, column: 34, }, end: Position { line: 204, column: 50, }, }, }, ), Identifier( Identifier { id: "configFileLogin", span: Span { start: Position { line: 204, column: 51, }, end: Position { line: 204, column: 66, }, }, }, ), ], }, ), }, ), Raw( PartRaw { content: "\n printf 'skey = %s\\n' \"$(cat ", span: Span { start: Position { line: 198, column: 1, }, end: Position { line: 205, column: 41, }, }, }, ), Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 205, column: 43, }, end: Position { line: 205, column: 46, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "secretKeyFile", span: Span { start: Position { line: 205, column: 47, }, end: Position { line: 205, column: 60, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: ")\"\n } >\"$conf\"\n\n chown sshd \"$conf\"\n mv -fT \"$conf\" /etc/duo/login_duo.conf\nfi\n", span: Span { start: Position { line: 198, column: 1, }, end: Position { line: 211, column: 7, }, }, }, ), ], span: Span { start: Position { line: 197, column: 39, }, end: Position { line: 211, column: 9, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "pam_duo", span: Span { start: Position { line: 212, column: 7, }, end: Position { line: 212, column: 14, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkIf", span: Span { start: Position { line: 212, column: 17, }, end: Position { line: 212, column: 21, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 212, column: 22, }, end: Position { line: 212, column: 25, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "pam", span: Span { start: Position { line: 212, column: 26, }, end: Position { line: 212, column: 29, }, }, }, ), Raw( PartRaw { content: "enable", span: Span { start: Position { line: 212, column: 30, }, end: Position { line: 212, column: 36, }, }, }, ), ], default: None, }, ), IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "if test -f \"", span: Span { start: Position { line: 213, column: 1, }, end: Position { line: 213, column: 21, }, }, }, ), Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 213, column: 23, }, end: Position { line: 213, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "secretKeyFile", span: Span { start: Position { line: 213, column: 27, }, end: Position { line: 213, column: 40, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "\"; then\n mkdir -m 0755 -p /etc/duo\n\n umask 0077\n conf=\"$(mktemp)\"\n {\n cat ", span: Span { start: Position { line: 213, column: 1, }, end: Position { line: 219, column: 17, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 219, column: 19, }, end: Position { line: 219, column: 23, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "writeText", span: Span { start: Position { line: 219, column: 24, }, end: Position { line: 219, column: 33, }, }, }, ), ], default: None, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "login_duo.conf", span: Span { start: Position { line: 219, column: 35, }, end: Position { line: 219, column: 49, }, }, }, ), ], span: Span { start: Position { line: 219, column: 34, }, end: Position { line: 219, column: 50, }, }, }, ), Identifier( Identifier { id: "configFilePam", span: Span { start: Position { line: 219, column: 51, }, end: Position { line: 219, column: 64, }, }, }, ), ], }, ), }, ), Raw( PartRaw { content: "\n printf 'skey = %s\\n' \"$(cat ", span: Span { start: Position { line: 213, column: 1, }, end: Position { line: 220, column: 41, }, }, }, ), Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 220, column: 43, }, end: Position { line: 220, column: 46, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "secretKeyFile", span: Span { start: Position { line: 220, column: 47, }, end: Position { line: 220, column: 60, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: ")\"\n } >\"$conf\"\n\n mv -fT \"$conf\" /etc/duo/pam_duo.conf\nfi\n", span: Span { start: Position { line: 213, column: 1, }, end: Position { line: 225, column: 7, }, }, }, ), ], span: Span { start: Position { line: 212, column: 37, }, end: Position { line: 225, column: 9, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 196, column: 32, }, end: Position { line: 226, column: 6, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "services", span: Span { start: Position { line: 230, column: 5, }, end: Position { line: 230, column: 13, }, }, }, ), Raw( PartRaw { content: "openssh", span: Span { start: Position { line: 230, column: 14, }, end: Position { line: 230, column: 21, }, }, }, ), Raw( PartRaw { content: "extraConfig", span: Span { start: Position { line: 230, column: 22, }, end: Position { line: 230, column: 33, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkIf", span: Span { start: Position { line: 230, column: 36, }, end: Position { line: 230, column: 40, }, }, }, ), arguments: [ BinaryOperation( BinaryOperation { left: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 230, column: 42, }, end: Position { line: 230, column: 45, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "ssh", span: Span { start: Position { line: 230, column: 46, }, end: Position { line: 230, column: 49, }, }, }, ), Raw( PartRaw { content: "enable", span: Span { start: Position { line: 230, column: 50, }, end: Position { line: 230, column: 56, }, }, }, ), ], default: None, }, ), operator: LogicalOr, right: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 230, column: 60, }, end: Position { line: 230, column: 63, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "pam", span: Span { start: Position { line: 230, column: 64, }, end: Position { line: 230, column: 67, }, }, }, ), Raw( PartRaw { content: "enable", span: Span { start: Position { line: 230, column: 68, }, end: Position { line: 230, column: 74, }, }, }, ), ], default: None, }, ), }, ), IfThenElse( IfThenElse { predicate: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 231, column: 8, }, end: Position { line: 231, column: 11, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "pam", span: Span { start: Position { line: 231, column: 12, }, end: Position { line: 231, column: 15, }, }, }, ), Raw( PartRaw { content: "enable", span: Span { start: Position { line: 231, column: 16, }, end: Position { line: 231, column: 22, }, }, }, ), ], default: None, }, ), then: String( String_ { parts: [ Raw( PartRaw { content: "UseDNS no", span: Span { start: Position { line: 231, column: 29, }, end: Position { line: 231, column: 38, }, }, }, ), ], span: Span { start: Position { line: 231, column: 28, }, end: Position { line: 231, column: 39, }, }, }, ), else_: IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "# Duo Security configuration\nForceCommand ", span: Span { start: Position { line: 232, column: 1, }, end: Position { line: 233, column: 20, }, }, }, ), Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "config", span: Span { start: Position { line: 233, column: 22, }, end: Position { line: 233, column: 28, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 233, column: 29, }, end: Position { line: 233, column: 37, }, }, }, ), Raw( PartRaw { content: "wrapperDir", span: Span { start: Position { line: 233, column: 38, }, end: Position { line: 233, column: 48, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "/login_duo\nPermitTunnel no\n", span: Span { start: Position { line: 232, column: 1, }, end: Position { line: 235, column: 7, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "optionalString", span: Span { start: Position { line: 235, column: 9, }, end: Position { line: 235, column: 23, }, }, }, ), arguments: [ UnaryOperation( UnaryOperation { operator: Not, operand: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 235, column: 26, }, end: Position { line: 235, column: 29, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "allowTcpForwarding", span: Span { start: Position { line: 235, column: 30, }, end: Position { line: 235, column: 48, }, }, }, ), ], default: None, }, ), span: Span { start: Position { line: 235, column: 25, }, end: Position { line: 235, column: 48, }, }, }, ), IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "AllowTcpForwarding no\n", span: Span { start: Position { line: 236, column: 1, }, end: Position { line: 237, column: 7, }, }, }, ), ], span: Span { start: Position { line: 235, column: 50, }, end: Position { line: 237, column: 9, }, }, }, ), ], }, ), }, ), Raw( PartRaw { content: "\n", span: Span { start: Position { line: 232, column: 1, }, end: Position { line: 238, column: 5, }, }, }, ), ], span: Span { start: Position { line: 231, column: 45, }, end: Position { line: 238, column: 7, }, }, }, ), span: Span { start: Position { line: 231, column: 5, }, end: Position { line: 238, column: 7, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 186, column: 52, }, end: Position { line: 239, column: 4, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 27, column: 1, }, end: Position { line: 240, column: 2, }, }, }, ), span: Span { start: Position { line: 5, column: 1, }, end: Position { line: 240, column: 2, }, }, }, ), span: Span { start: Position { line: 3, column: 1, }, end: Position { line: 240, column: 2, }, }, }, ), span: Span { start: Position { line: 1, column: 1, }, end: Position { line: 240, column: 2, }, }, }, )