Function( Function { head: Destructured( FunctionHeadDestructured { ellipsis: true, identifier: None, arguments: [ FunctionHeadDestructuredArgument { identifier: "config", default: None, }, FunctionHeadDestructuredArgument { identifier: "lib", default: None, }, FunctionHeadDestructuredArgument { identifier: "pkgs", default: None, }, ], }, ), body: With( With { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 1, column: 34, }, end: Position { line: 1, column: 37, }, }, }, ), target: LetIn( LetIn { bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "cfg", span: Span { start: Position { line: 3, column: 3, }, end: Position { line: 3, column: 6, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "config", span: Span { start: Position { line: 3, column: 9, }, end: Position { line: 3, column: 15, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "services", span: Span { start: Position { line: 3, column: 16, }, end: Position { line: 3, column: 24, }, }, }, ), Raw( PartRaw { content: "promtail", span: Span { start: Position { line: 3, column: 25, }, end: Position { line: 3, column: 33, }, }, }, ), ], default: None, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "prettyJSON", span: Span { start: Position { line: 5, column: 3, }, end: Position { line: 5, column: 13, }, }, }, ), ], to: Function( Function { head: Simple( FunctionHeadSimple { identifier: "conf", }, ), body: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 5, column: 22, }, end: Position { line: 5, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "runCommandLocal", span: Span { start: Position { line: 5, column: 27, }, end: Position { line: 5, column: 42, }, }, }, ), ], default: None, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "promtail-config.json", span: Span { start: Position { line: 5, column: 44, }, end: Position { line: 5, column: 64, }, }, }, ), ], span: Span { start: Position { line: 5, column: 43, }, end: Position { line: 5, column: 65, }, }, }, ), Map( Map { recursive: false, bindings: [], span: Span { start: Position { line: 5, column: 66, }, end: Position { line: 5, column: 68, }, }, }, ), IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "echo ", span: Span { start: Position { line: 6, column: 1, }, end: Position { line: 6, column: 10, }, }, }, ), Raw( PartRaw { content: "'", span: Span { start: Position { line: 6, column: 1, }, end: Position { line: 6, column: 11, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "builtins", span: Span { start: Position { line: 6, column: 13, }, end: Position { line: 6, column: 21, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "toJSON", span: Span { start: Position { line: 6, column: 22, }, end: Position { line: 6, column: 28, }, }, }, ), ], default: None, }, ), arguments: [ Identifier( Identifier { id: "conf", span: Span { start: Position { line: 6, column: 29, }, end: Position { line: 6, column: 33, }, }, }, ), ], }, ), }, ), Raw( PartRaw { content: "' | ", span: Span { start: Position { line: 6, column: 1, }, end: Position { line: 6, column: 38, }, }, }, ), Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 6, column: 40, }, end: Position { line: 6, column: 44, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "buildPackages", span: Span { start: Position { line: 6, column: 45, }, end: Position { line: 6, column: 58, }, }, }, ), Raw( PartRaw { content: "jq", span: Span { start: Position { line: 6, column: 59, }, end: Position { line: 6, column: 61, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "/bin/jq 'del(._module)' > $out\n", span: Span { start: Position { line: 6, column: 1, }, end: Position { line: 7, column: 3, }, }, }, ), ], span: Span { start: Position { line: 5, column: 69, }, end: Position { line: 7, column: 5, }, }, }, ), ], }, ), span: Span { start: Position { line: 5, column: 16, }, end: Position { line: 7, column: 5, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "allowSystemdJournal", span: Span { start: Position { line: 9, column: 3, }, end: Position { line: 9, column: 22, }, }, }, ), ], to: BinaryOperation( BinaryOperation { left: HasAttribute( HasAttribute { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 9, column: 25, }, end: Position { line: 9, column: 28, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "configuration", span: Span { start: Position { line: 9, column: 29, }, end: Position { line: 9, column: 42, }, }, }, ), ], default: None, }, ), attribute_path: [ Raw( PartRaw { content: "scrape_configs", span: Span { start: Position { line: 9, column: 45, }, end: Position { line: 9, column: 59, }, }, }, ), ], }, ), operator: LogicalAnd, right: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 9, column: 63, }, end: Position { line: 9, column: 66, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "any", span: Span { start: Position { line: 9, column: 67, }, end: Position { line: 9, column: 70, }, }, }, ), ], default: None, }, ), arguments: [ Function( Function { head: Simple( FunctionHeadSimple { identifier: "v", }, ), body: HasAttribute( HasAttribute { expression: Identifier( Identifier { id: "v", span: Span { start: Position { line: 9, column: 75, }, end: Position { line: 9, column: 76, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "journal", span: Span { start: Position { line: 9, column: 79, }, end: Position { line: 9, column: 86, }, }, }, ), ], }, ), span: Span { start: Position { line: 9, column: 72, }, end: Position { line: 9, column: 86, }, }, }, ), PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 9, column: 88, }, end: Position { line: 9, column: 91, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "configuration", span: Span { start: Position { line: 9, column: 92, }, end: Position { line: 9, column: 105, }, }, }, ), Raw( PartRaw { content: "scrape_configs", span: Span { start: Position { line: 9, column: 106, }, end: Position { line: 9, column: 120, }, }, }, ), ], default: None, }, ), ], }, ), }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "allowPositionsFile", span: Span { start: Position { line: 11, column: 3, }, end: Position { line: 11, column: 21, }, }, }, ), ], to: UnaryOperation( UnaryOperation { operator: Not, operand: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 11, column: 25, }, end: Position { line: 11, column: 28, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "hasPrefix", span: Span { start: Position { line: 11, column: 29, }, end: Position { line: 11, column: 38, }, }, }, ), ], default: None, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "/var/cache/promtail", span: Span { start: Position { line: 11, column: 40, }, end: Position { line: 11, column: 59, }, }, }, ), ], span: Span { start: Position { line: 11, column: 39, }, end: Position { line: 11, column: 60, }, }, }, ), Identifier( Identifier { id: "positionsFile", span: Span { start: Position { line: 11, column: 61, }, end: Position { line: 11, column: 74, }, }, }, ), ], }, ), span: Span { start: Position { line: 11, column: 24, }, end: Position { line: 11, column: 74, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "positionsFile", span: Span { start: Position { line: 12, column: 3, }, end: Position { line: 12, column: 16, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 12, column: 19, }, end: Position { line: 12, column: 22, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "configuration", span: Span { start: Position { line: 12, column: 23, }, end: Position { line: 12, column: 36, }, }, }, ), Raw( PartRaw { content: "positions", span: Span { start: Position { line: 12, column: 37, }, end: Position { line: 12, column: 46, }, }, }, ), Raw( PartRaw { content: "filename", span: Span { start: Position { line: 12, column: 47, }, end: Position { line: 12, column: 55, }, }, }, ), ], default: None, }, ), }, ), ], target: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "options", span: Span { start: Position { line: 14, column: 3, }, end: Position { line: 14, column: 10, }, }, }, ), Raw( PartRaw { content: "services", span: Span { start: Position { line: 14, column: 11, }, end: Position { line: 14, column: 19, }, }, }, ), Raw( PartRaw { content: "promtail", span: Span { start: Position { line: 14, column: 20, }, end: Position { line: 14, column: 28, }, }, }, ), ], to: With( With { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 14, column: 36, }, end: Position { line: 14, column: 41, }, }, }, ), target: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "enable", span: Span { start: Position { line: 15, column: 5, }, end: Position { line: 15, column: 11, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkEnableOption", span: Span { start: Position { line: 15, column: 14, }, end: Position { line: 15, column: 28, }, }, }, ), arguments: [ FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 15, column: 30, }, end: Position { line: 15, column: 33, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 15, column: 34, }, end: Position { line: 15, column: 39, }, }, }, ), ], default: None, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "the Promtail ingresser", span: Span { start: Position { line: 15, column: 41, }, end: Position { line: 15, column: 63, }, }, }, ), ], span: Span { start: Position { line: 15, column: 40, }, end: Position { line: 15, column: 64, }, }, }, ), ], }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "configuration", span: Span { start: Position { line: 18, column: 5, }, end: Position { line: 18, column: 18, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 18, column: 21, }, end: Position { line: 18, column: 29, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 19, column: 7, }, end: Position { line: 19, column: 11, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 19, column: 15, }, end: Position { line: 19, column: 19, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "formats", span: Span { start: Position { line: 19, column: 20, }, end: Position { line: 19, column: 27, }, }, }, ), Raw( PartRaw { content: "json", span: Span { start: Position { line: 19, column: 28, }, end: Position { line: 19, column: 32, }, }, }, ), ], default: None, }, ), arguments: [ Map( Map { recursive: false, bindings: [], span: Span { start: Position { line: 19, column: 33, }, end: Position { line: 19, column: 35, }, }, }, ), ], }, ), attribute_path: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 19, column: 37, }, end: Position { line: 19, column: 41, }, }, }, ), ], default: None, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 20, column: 7, }, end: Position { line: 20, column: 18, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 20, column: 21, }, end: Position { line: 20, column: 24, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 20, column: 25, }, end: Position { line: 20, column: 30, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "Specify the configuration for Promtail in Nix.\n", span: Span { start: Position { line: 21, column: 1, }, end: Position { line: 22, column: 7, }, }, }, ), ], span: Span { start: Position { line: 20, column: 31, }, end: Position { line: 22, column: 9, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 18, column: 30, }, end: Position { line: 23, column: 6, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "extraFlags", span: Span { start: Position { line: 25, column: 5, }, end: Position { line: 25, column: 15, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 25, column: 18, }, end: Position { line: 25, column: 26, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 26, column: 7, }, end: Position { line: 26, column: 11, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "listOf", span: Span { start: Position { line: 26, column: 14, }, end: Position { line: 26, column: 20, }, }, }, ), arguments: [ Identifier( Identifier { id: "str", span: Span { start: Position { line: 26, column: 21, }, end: Position { line: 26, column: 24, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 27, column: 7, }, end: Position { line: 27, column: 14, }, }, }, ), ], to: List( List { elements: [], span: Span { start: Position { line: 27, column: 17, }, end: Position { line: 27, column: 19, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "example", span: Span { start: Position { line: 28, column: 7, }, end: Position { line: 28, column: 14, }, }, }, ), ], to: List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "--server.http-listen-port=3101", span: Span { start: Position { line: 28, column: 20, }, end: Position { line: 28, column: 50, }, }, }, ), ], span: Span { start: Position { line: 28, column: 19, }, end: Position { line: 28, column: 51, }, }, }, ), ], span: Span { start: Position { line: 28, column: 17, }, end: Position { line: 28, column: 53, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 29, column: 7, }, end: Position { line: 29, column: 18, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 29, column: 21, }, end: Position { line: 29, column: 24, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 29, column: 25, }, end: Position { line: 29, column: 30, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "Specify a list of additional command line flags,\nwhich get escaped and are then passed to Loki.\n", span: Span { start: Position { line: 30, column: 1, }, end: Position { line: 32, column: 7, }, }, }, ), ], span: Span { start: Position { line: 29, column: 31, }, end: Position { line: 32, column: 9, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 25, column: 27, }, end: Position { line: 33, column: 6, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 14, column: 43, }, end: Position { line: 34, column: 4, }, }, }, ), span: Span { start: Position { line: 14, column: 31, }, end: Position { line: 34, column: 4, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "config", span: Span { start: Position { line: 36, column: 3, }, end: Position { line: 36, column: 9, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkIf", span: Span { start: Position { line: 36, column: 12, }, end: Position { line: 36, column: 16, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 36, column: 17, }, end: Position { line: 36, column: 20, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "enable", span: Span { start: Position { line: 36, column: 21, }, end: Position { line: 36, column: 27, }, }, }, ), ], default: None, }, ), Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "services", span: Span { start: Position { line: 37, column: 5, }, end: Position { line: 37, column: 13, }, }, }, ), Raw( PartRaw { content: "promtail", span: Span { start: Position { line: 37, column: 14, }, end: Position { line: 37, column: 22, }, }, }, ), Raw( PartRaw { content: "configuration", span: Span { start: Position { line: 37, column: 23, }, end: Position { line: 37, column: 36, }, }, }, ), Raw( PartRaw { content: "positions", span: Span { start: Position { line: 37, column: 37, }, end: Position { line: 37, column: 46, }, }, }, ), Raw( PartRaw { content: "filename", span: Span { start: Position { line: 37, column: 47, }, end: Position { line: 37, column: 55, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkDefault", span: Span { start: Position { line: 37, column: 58, }, end: Position { line: 37, column: 67, }, }, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "/var/cache/promtail/positions.yaml", span: Span { start: Position { line: 37, column: 69, }, end: Position { line: 37, column: 103, }, }, }, ), ], span: Span { start: Position { line: 37, column: 68, }, end: Position { line: 37, column: 104, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "systemd", span: Span { start: Position { line: 39, column: 5, }, end: Position { line: 39, column: 12, }, }, }, ), Raw( PartRaw { content: "services", span: Span { start: Position { line: 39, column: 13, }, end: Position { line: 39, column: 21, }, }, }, ), Raw( PartRaw { content: "promtail", span: Span { start: Position { line: 39, column: 22, }, end: Position { line: 39, column: 30, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 40, column: 7, }, end: Position { line: 40, column: 18, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "Promtail log ingress", span: Span { start: Position { line: 40, column: 22, }, end: Position { line: 40, column: 42, }, }, }, ), ], span: Span { start: Position { line: 40, column: 21, }, end: Position { line: 40, column: 43, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "wantedBy", span: Span { start: Position { line: 41, column: 7, }, end: Position { line: 41, column: 15, }, }, }, ), ], to: List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "multi-user.target", span: Span { start: Position { line: 41, column: 21, }, end: Position { line: 41, column: 38, }, }, }, ), ], span: Span { start: Position { line: 41, column: 20, }, end: Position { line: 41, column: 39, }, }, }, ), ], span: Span { start: Position { line: 41, column: 18, }, end: Position { line: 41, column: 41, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "stopIfChanged", span: Span { start: Position { line: 42, column: 7, }, end: Position { line: 42, column: 20, }, }, }, ), ], to: Identifier( Identifier { id: "false", span: Span { start: Position { line: 42, column: 23, }, end: Position { line: 42, column: 28, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "serviceConfig", span: Span { start: Position { line: 44, column: 7, }, end: Position { line: 44, column: 20, }, }, }, ), ], to: BinaryOperation( BinaryOperation { left: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "Restart", span: Span { start: Position { line: 45, column: 9, }, end: Position { line: 45, column: 16, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "on-failure", span: Span { start: Position { line: 45, column: 20, }, end: Position { line: 45, column: 30, }, }, }, ), ], span: Span { start: Position { line: 45, column: 19, }, end: Position { line: 45, column: 31, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "TimeoutStopSec", span: Span { start: Position { line: 46, column: 9, }, end: Position { line: 46, column: 23, }, }, }, ), ], to: Integer( Integer { value: "10", span: Span { start: Position { line: 46, column: 26, }, end: Position { line: 46, column: 28, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ExecStart", span: Span { start: Position { line: 48, column: 9, }, end: Position { line: 48, column: 18, }, }, }, ), ], to: String( String_ { parts: [ Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 48, column: 24, }, end: Position { line: 48, column: 28, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "promtail", span: Span { start: Position { line: 48, column: 29, }, end: Position { line: 48, column: 37, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "/bin/promtail -config.file=", span: Span { start: Position { line: 48, column: 22, }, end: Position { line: 48, column: 65, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "prettyJSON", span: Span { start: Position { line: 48, column: 67, }, end: Position { line: 48, column: 77, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 48, column: 78, }, end: Position { line: 48, column: 81, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "configuration", span: Span { start: Position { line: 48, column: 82, }, end: Position { line: 48, column: 95, }, }, }, ), ], default: None, }, ), ], }, ), }, ), Raw( PartRaw { content: " ", span: Span { start: Position { line: 48, column: 22, }, end: Position { line: 48, column: 97, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "escapeShellArgs", span: Span { start: Position { line: 48, column: 99, }, end: Position { line: 48, column: 114, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 48, column: 115, }, end: Position { line: 48, column: 118, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "extraFlags", span: Span { start: Position { line: 48, column: 119, }, end: Position { line: 48, column: 129, }, }, }, ), ], default: None, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 48, column: 21, }, end: Position { line: 48, column: 131, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ProtectSystem", span: Span { start: Position { line: 50, column: 9, }, end: Position { line: 50, column: 22, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "strict", span: Span { start: Position { line: 50, column: 26, }, end: Position { line: 50, column: 32, }, }, }, ), ], span: Span { start: Position { line: 50, column: 25, }, end: Position { line: 50, column: 33, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ProtectHome", span: Span { start: Position { line: 51, column: 9, }, end: Position { line: 51, column: 20, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 51, column: 23, }, end: Position { line: 51, column: 27, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "PrivateTmp", span: Span { start: Position { line: 52, column: 9, }, end: Position { line: 52, column: 19, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 52, column: 22, }, end: Position { line: 52, column: 26, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "PrivateDevices", span: Span { start: Position { line: 53, column: 9, }, end: Position { line: 53, column: 23, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 53, column: 26, }, end: Position { line: 53, column: 30, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ProtectKernelTunables", span: Span { start: Position { line: 54, column: 9, }, end: Position { line: 54, column: 30, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 54, column: 33, }, end: Position { line: 54, column: 37, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ProtectControlGroups", span: Span { start: Position { line: 55, column: 9, }, end: Position { line: 55, column: 29, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 55, column: 32, }, end: Position { line: 55, column: 36, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "RestrictSUIDSGID", span: Span { start: Position { line: 56, column: 9, }, end: Position { line: 56, column: 25, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 56, column: 28, }, end: Position { line: 56, column: 32, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "PrivateMounts", span: Span { start: Position { line: 57, column: 9, }, end: Position { line: 57, column: 22, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 57, column: 25, }, end: Position { line: 57, column: 29, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "CacheDirectory", span: Span { start: Position { line: 58, column: 9, }, end: Position { line: 58, column: 23, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "promtail", span: Span { start: Position { line: 58, column: 27, }, end: Position { line: 58, column: 35, }, }, }, ), ], span: Span { start: Position { line: 58, column: 26, }, end: Position { line: 58, column: 36, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ReadWritePaths", span: Span { start: Position { line: 59, column: 9, }, end: Position { line: 59, column: 23, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 59, column: 26, }, end: Position { line: 59, column: 29, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "optional", span: Span { start: Position { line: 59, column: 30, }, end: Position { line: 59, column: 38, }, }, }, ), ], default: None, }, ), arguments: [ Identifier( Identifier { id: "allowPositionsFile", span: Span { start: Position { line: 59, column: 39, }, end: Position { line: 59, column: 57, }, }, }, ), FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "builtins", span: Span { start: Position { line: 59, column: 59, }, end: Position { line: 59, column: 67, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "dirOf", span: Span { start: Position { line: 59, column: 68, }, end: Position { line: 59, column: 73, }, }, }, ), ], default: None, }, ), arguments: [ Identifier( Identifier { id: "positionsFile", span: Span { start: Position { line: 59, column: 74, }, end: Position { line: 59, column: 87, }, }, }, ), ], }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "User", span: Span { start: Position { line: 61, column: 9, }, end: Position { line: 61, column: 13, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "promtail", span: Span { start: Position { line: 61, column: 17, }, end: Position { line: 61, column: 25, }, }, }, ), ], span: Span { start: Position { line: 61, column: 16, }, end: Position { line: 61, column: 26, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "Group", span: Span { start: Position { line: 62, column: 9, }, end: Position { line: 62, column: 14, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "promtail", span: Span { start: Position { line: 62, column: 18, }, end: Position { line: 62, column: 26, }, }, }, ), ], span: Span { start: Position { line: 62, column: 17, }, end: Position { line: 62, column: 27, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "CapabilityBoundingSet", span: Span { start: Position { line: 64, column: 9, }, end: Position { line: 64, column: 30, }, }, }, ), ], to: String( String_ { parts: [], span: Span { start: Position { line: 64, column: 33, }, end: Position { line: 64, column: 35, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "NoNewPrivileges", span: Span { start: Position { line: 65, column: 9, }, end: Position { line: 65, column: 24, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 65, column: 27, }, end: Position { line: 65, column: 31, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ProtectKernelModules", span: Span { start: Position { line: 67, column: 9, }, end: Position { line: 67, column: 29, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 67, column: 32, }, end: Position { line: 67, column: 36, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "SystemCallArchitectures", span: Span { start: Position { line: 68, column: 9, }, end: Position { line: 68, column: 32, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "native", span: Span { start: Position { line: 68, column: 36, }, end: Position { line: 68, column: 42, }, }, }, ), ], span: Span { start: Position { line: 68, column: 35, }, end: Position { line: 68, column: 43, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ProtectKernelLogs", span: Span { start: Position { line: 69, column: 9, }, end: Position { line: 69, column: 26, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 69, column: 29, }, end: Position { line: 69, column: 33, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ProtectClock", span: Span { start: Position { line: 70, column: 9, }, end: Position { line: 70, column: 21, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 70, column: 24, }, end: Position { line: 70, column: 28, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "LockPersonality", span: Span { start: Position { line: 72, column: 9, }, end: Position { line: 72, column: 24, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 72, column: 27, }, end: Position { line: 72, column: 31, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ProtectHostname", span: Span { start: Position { line: 73, column: 9, }, end: Position { line: 73, column: 24, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 73, column: 27, }, end: Position { line: 73, column: 31, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "RestrictRealtime", span: Span { start: Position { line: 74, column: 9, }, end: Position { line: 74, column: 25, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 74, column: 28, }, end: Position { line: 74, column: 32, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "MemoryDenyWriteExecute", span: Span { start: Position { line: 75, column: 9, }, end: Position { line: 75, column: 31, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 75, column: 34, }, end: Position { line: 75, column: 38, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "PrivateUsers", span: Span { start: Position { line: 76, column: 9, }, end: Position { line: 76, column: 21, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 76, column: 24, }, end: Position { line: 76, column: 28, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "SupplementaryGroups", span: Span { start: Position { line: 78, column: 9, }, end: Position { line: 78, column: 28, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 78, column: 31, }, end: Position { line: 78, column: 34, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "optional", span: Span { start: Position { line: 78, column: 35, }, end: Position { line: 78, column: 43, }, }, }, ), ], default: None, }, ), arguments: [ Identifier( Identifier { id: "allowSystemdJournal", span: Span { start: Position { line: 78, column: 45, }, end: Position { line: 78, column: 64, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "systemd-journal", span: Span { start: Position { line: 78, column: 67, }, end: Position { line: 78, column: 82, }, }, }, ), ], span: Span { start: Position { line: 78, column: 66, }, end: Position { line: 78, column: 83, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 44, column: 23, }, end: Position { line: 79, column: 8, }, }, }, ), operator: Update, right: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "optionalAttrs", span: Span { start: Position { line: 79, column: 13, }, end: Position { line: 79, column: 26, }, }, }, ), arguments: [ UnaryOperation( UnaryOperation { operator: Not, operand: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 79, column: 29, }, end: Position { line: 79, column: 33, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "stdenv", span: Span { start: Position { line: 79, column: 34, }, end: Position { line: 79, column: 40, }, }, }, ), Raw( PartRaw { content: "isAarch64", span: Span { start: Position { line: 79, column: 41, }, end: Position { line: 79, column: 50, }, }, }, ), ], default: None, }, ), span: Span { start: Position { line: 79, column: 28, }, end: Position { line: 79, column: 50, }, }, }, ), Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "SystemCallFilter", span: Span { start: Position { line: 80, column: 9, }, end: Position { line: 80, column: 25, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "@system-service", span: Span { start: Position { line: 80, column: 29, }, end: Position { line: 80, column: 44, }, }, }, ), ], span: Span { start: Position { line: 80, column: 28, }, end: Position { line: 80, column: 45, }, }, }, ), }, ), ], span: Span { start: Position { line: 79, column: 52, }, end: Position { line: 81, column: 8, }, }, }, ), ], }, ), }, ), }, ), ], span: Span { start: Position { line: 39, column: 33, }, end: Position { line: 82, column: 6, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "users", span: Span { start: Position { line: 84, column: 5, }, end: Position { line: 84, column: 10, }, }, }, ), Raw( PartRaw { content: "groups", span: Span { start: Position { line: 84, column: 11, }, end: Position { line: 84, column: 17, }, }, }, ), Raw( PartRaw { content: "promtail", span: Span { start: Position { line: 84, column: 18, }, end: Position { line: 84, column: 26, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [], span: Span { start: Position { line: 84, column: 29, }, end: Position { line: 84, column: 31, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "users", span: Span { start: Position { line: 85, column: 5, }, end: Position { line: 85, column: 10, }, }, }, ), Raw( PartRaw { content: "users", span: Span { start: Position { line: 85, column: 11, }, end: Position { line: 85, column: 16, }, }, }, ), Raw( PartRaw { content: "promtail", span: Span { start: Position { line: 85, column: 17, }, end: Position { line: 85, column: 25, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 86, column: 7, }, end: Position { line: 86, column: 18, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "Promtail service user", span: Span { start: Position { line: 86, column: 22, }, end: Position { line: 86, column: 43, }, }, }, ), ], span: Span { start: Position { line: 86, column: 21, }, end: Position { line: 86, column: 44, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "isSystemUser", span: Span { start: Position { line: 87, column: 7, }, end: Position { line: 87, column: 19, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 87, column: 22, }, end: Position { line: 87, column: 26, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "group", span: Span { start: Position { line: 88, column: 7, }, end: Position { line: 88, column: 12, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "promtail", span: Span { start: Position { line: 88, column: 16, }, end: Position { line: 88, column: 24, }, }, }, ), ], span: Span { start: Position { line: 88, column: 15, }, end: Position { line: 88, column: 25, }, }, }, ), }, ), ], span: Span { start: Position { line: 85, column: 28, }, end: Position { line: 89, column: 6, }, }, }, ), }, ), ], span: Span { start: Position { line: 36, column: 28, }, end: Position { line: 90, column: 4, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 13, column: 4, }, end: Position { line: 91, column: 2, }, }, }, ), span: Span { start: Position { line: 2, column: 1, }, end: Position { line: 91, column: 2, }, }, }, ), span: Span { start: Position { line: 1, column: 29, }, end: Position { line: 91, column: 2, }, }, }, ), span: Span { start: Position { line: 1, column: 1, }, end: Position { line: 91, column: 2, }, }, }, )