Function( Function { head: Destructured( FunctionHeadDestructured { ellipsis: true, identifier: None, arguments: [ FunctionHeadDestructuredArgument { identifier: "config", default: None, }, FunctionHeadDestructuredArgument { identifier: "lib", default: None, }, FunctionHeadDestructuredArgument { identifier: "pkgs", default: None, }, ], }, ), body: LetIn( LetIn { bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "cfg", span: Span { start: Position { line: 4, column: 3, }, end: Position { line: 4, column: 6, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "config", span: Span { start: Position { line: 4, column: 9, }, end: Position { line: 4, column: 15, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "services", span: Span { start: Position { line: 4, column: 16, }, end: Position { line: 4, column: 24, }, }, }, ), Raw( PartRaw { content: "geoipupdate", span: Span { start: Position { line: 4, column: 25, }, end: Position { line: 4, column: 36, }, }, }, ), ], default: None, }, ), }, ), Inherit( BindingInherit { from: Some( Identifier( Identifier { id: "builtins", span: Span { start: Position { line: 5, column: 12, }, end: Position { line: 5, column: 20, }, }, }, ), ), attributes: [ Raw( PartRaw { content: "isAttrs", span: Span { start: Position { line: 5, column: 22, }, end: Position { line: 5, column: 29, }, }, }, ), Raw( PartRaw { content: "isString", span: Span { start: Position { line: 5, column: 30, }, end: Position { line: 5, column: 38, }, }, }, ), Raw( PartRaw { content: "isInt", span: Span { start: Position { line: 5, column: 39, }, end: Position { line: 5, column: 44, }, }, }, ), Raw( PartRaw { content: "isList", span: Span { start: Position { line: 5, column: 45, }, end: Position { line: 5, column: 51, }, }, }, ), Raw( PartRaw { content: "typeOf", span: Span { start: Position { line: 5, column: 52, }, end: Position { line: 5, column: 58, }, }, }, ), Raw( PartRaw { content: "hashString", span: Span { start: Position { line: 5, column: 59, }, end: Position { line: 5, column: 69, }, }, }, ), ], span: Span { start: Position { line: 3, column: 4, }, end: Position { line: 5, column: 70, }, }, }, ), ], target: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "imports", span: Span { start: Position { line: 8, column: 3, }, end: Position { line: 8, column: 10, }, }, }, ), ], to: List( List { elements: [ FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 9, column: 6, }, end: Position { line: 9, column: 9, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mkRemovedOptionModule", span: Span { start: Position { line: 9, column: 10, }, end: Position { line: 9, column: 31, }, }, }, ), ], default: None, }, ), arguments: [ List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "services", span: Span { start: Position { line: 9, column: 35, }, end: Position { line: 9, column: 43, }, }, }, ), ], span: Span { start: Position { line: 9, column: 34, }, end: Position { line: 9, column: 44, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "geoip-updater", span: Span { start: Position { line: 9, column: 46, }, end: Position { line: 9, column: 59, }, }, }, ), ], span: Span { start: Position { line: 9, column: 45, }, end: Position { line: 9, column: 60, }, }, }, ), ], span: Span { start: Position { line: 9, column: 32, }, end: Position { line: 9, column: 62, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "services.geoip-updater has been removed, use services.geoipupdate instead.", span: Span { start: Position { line: 9, column: 64, }, end: Position { line: 9, column: 138, }, }, }, ), ], span: Span { start: Position { line: 9, column: 63, }, end: Position { line: 9, column: 139, }, }, }, ), ], }, ), ], span: Span { start: Position { line: 8, column: 13, }, end: Position { line: 10, column: 4, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "options", span: Span { start: Position { line: 12, column: 3, }, end: Position { line: 12, column: 10, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "services", span: Span { start: Position { line: 13, column: 5, }, end: Position { line: 13, column: 13, }, }, }, ), Raw( PartRaw { content: "geoipupdate", span: Span { start: Position { line: 13, column: 14, }, end: Position { line: 13, column: 25, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "enable", span: Span { start: Position { line: 14, column: 7, }, end: Position { line: 14, column: 13, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 14, column: 16, }, end: Position { line: 14, column: 19, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mkEnableOption", span: Span { start: Position { line: 14, column: 20, }, end: Position { line: 14, column: 34, }, }, }, ), ], default: None, }, ), arguments: [ FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 14, column: 36, }, end: Position { line: 14, column: 39, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 14, column: 40, }, end: Position { line: 14, column: 45, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "periodic downloading of GeoIP databases using geoipupdate.\n", span: Span { start: Position { line: 15, column: 1, }, end: Position { line: 16, column: 7, }, }, }, ), ], span: Span { start: Position { line: 14, column: 46, }, end: Position { line: 16, column: 9, }, }, }, ), ], }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "interval", span: Span { start: Position { line: 18, column: 7, }, end: Position { line: 18, column: 15, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 18, column: 18, }, end: Position { line: 18, column: 21, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mkOption", span: Span { start: Position { line: 18, column: 22, }, end: Position { line: 18, column: 30, }, }, }, ), ], default: None, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 19, column: 9, }, end: Position { line: 19, column: 13, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 19, column: 16, }, end: Position { line: 19, column: 19, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "types", span: Span { start: Position { line: 19, column: 20, }, end: Position { line: 19, column: 25, }, }, }, ), Raw( PartRaw { content: "str", span: Span { start: Position { line: 19, column: 26, }, end: Position { line: 19, column: 29, }, }, }, ), ], default: None, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 20, column: 9, }, end: Position { line: 20, column: 16, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "weekly", span: Span { start: Position { line: 20, column: 20, }, end: Position { line: 20, column: 26, }, }, }, ), ], span: Span { start: Position { line: 20, column: 19, }, end: Position { line: 20, column: 27, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 21, column: 9, }, end: Position { line: 21, column: 20, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 21, column: 23, }, end: Position { line: 21, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 21, column: 27, }, end: Position { line: 21, column: 32, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "Update the GeoIP databases at this time / interval.\nThe format is described in\n{manpage}`systemd.time(7)`.\n", span: Span { start: Position { line: 22, column: 1, }, end: Position { line: 25, column: 9, }, }, }, ), ], span: Span { start: Position { line: 21, column: 33, }, end: Position { line: 25, column: 11, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 18, column: 31, }, end: Position { line: 26, column: 8, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "settings", span: Span { start: Position { line: 28, column: 7, }, end: Position { line: 28, column: 15, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 28, column: 18, }, end: Position { line: 28, column: 21, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mkOption", span: Span { start: Position { line: 28, column: 22, }, end: Position { line: 28, column: 30, }, }, }, ), ], default: None, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "example", span: Span { start: Position { line: 29, column: 9, }, end: Position { line: 29, column: 16, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 29, column: 19, }, end: Position { line: 29, column: 22, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "literalExpression", span: Span { start: Position { line: 29, column: 23, }, end: Position { line: 29, column: 40, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "{\n AccountID = 200001;\n DatabaseDirectory = \"/var/lib/GeoIP\";\n LicenseKey = { _secret = \"/run/keys/maxmind_license_key\"; };\n Proxy = \"10.0.0.10:8888\";\n ProxyUserPassword = { _secret = \"/run/keys/proxy_pass\"; };\n}\n", span: Span { start: Position { line: 30, column: 1, }, end: Position { line: 37, column: 9, }, }, }, ), ], span: Span { start: Position { line: 29, column: 41, }, end: Position { line: 37, column: 11, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 38, column: 9, }, end: Position { line: 38, column: 20, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 38, column: 23, }, end: Position { line: 38, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 38, column: 27, }, end: Position { line: 38, column: 32, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "geoipupdate configuration options. See\n\nfor a full list of available options.\n\nSettings containing secret data should be set to an\nattribute set containing the attribute\n`_secret` - a string pointing to a file\ncontaining the value the option should be set to. See the\nexample to get a better picture of this: in the resulting\n{file}`GeoIP.conf` file, the\n`ProxyUserPassword` key will be set to the\ncontents of the\n{file}`/run/keys/proxy_pass` file.\n", span: Span { start: Position { line: 39, column: 1, }, end: Position { line: 52, column: 9, }, }, }, ), ], span: Span { start: Position { line: 38, column: 33, }, end: Position { line: 52, column: 11, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 53, column: 9, }, end: Position { line: 53, column: 13, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 53, column: 16, }, end: Position { line: 53, column: 19, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "types", span: Span { start: Position { line: 53, column: 20, }, end: Position { line: 53, column: 25, }, }, }, ), Raw( PartRaw { content: "submodule", span: Span { start: Position { line: 53, column: 26, }, end: Position { line: 53, column: 35, }, }, }, ), ], default: None, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "freeformType", span: Span { start: Position { line: 54, column: 11, }, end: Position { line: 54, column: 23, }, }, }, ), ], to: With( With { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 55, column: 18, }, end: Position { line: 55, column: 21, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "types", span: Span { start: Position { line: 55, column: 22, }, end: Position { line: 55, column: 27, }, }, }, ), ], default: None, }, ), target: LetIn( LetIn { bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 57, column: 15, }, end: Position { line: 57, column: 19, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "oneOf", span: Span { start: Position { line: 57, column: 22, }, end: Position { line: 57, column: 27, }, }, }, ), arguments: [ List( List { elements: [ Identifier( Identifier { id: "str", span: Span { start: Position { line: 57, column: 29, }, end: Position { line: 57, column: 32, }, }, }, ), Identifier( Identifier { id: "int", span: Span { start: Position { line: 57, column: 33, }, end: Position { line: 57, column: 36, }, }, }, ), Identifier( Identifier { id: "bool", span: Span { start: Position { line: 57, column: 37, }, end: Position { line: 57, column: 41, }, }, }, ), ], span: Span { start: Position { line: 57, column: 28, }, end: Position { line: 57, column: 42, }, }, }, ), ], }, ), }, ), ], target: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "attrsOf", span: Span { start: Position { line: 59, column: 15, }, end: Position { line: 59, column: 22, }, }, }, ), arguments: [ FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "either", span: Span { start: Position { line: 59, column: 24, }, end: Position { line: 59, column: 30, }, }, }, ), arguments: [ Identifier( Identifier { id: "type", span: Span { start: Position { line: 59, column: 31, }, end: Position { line: 59, column: 35, }, }, }, ), FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "listOf", span: Span { start: Position { line: 59, column: 37, }, end: Position { line: 59, column: 43, }, }, }, ), arguments: [ Identifier( Identifier { id: "type", span: Span { start: Position { line: 59, column: 44, }, end: Position { line: 59, column: 48, }, }, }, ), ], }, ), ], }, ), ], }, ), span: Span { start: Position { line: 56, column: 13, }, end: Position { line: 59, column: 50, }, }, }, ), span: Span { start: Position { line: 55, column: 13, }, end: Position { line: 59, column: 50, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "options", span: Span { start: Position { line: 61, column: 11, }, end: Position { line: 61, column: 18, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "AccountID", span: Span { start: Position { line: 63, column: 13, }, end: Position { line: 63, column: 22, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 63, column: 25, }, end: Position { line: 63, column: 28, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mkOption", span: Span { start: Position { line: 63, column: 29, }, end: Position { line: 63, column: 37, }, }, }, ), ], default: None, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 64, column: 15, }, end: Position { line: 64, column: 19, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 64, column: 22, }, end: Position { line: 64, column: 25, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "types", span: Span { start: Position { line: 64, column: 26, }, end: Position { line: 64, column: 31, }, }, }, ), Raw( PartRaw { content: "int", span: Span { start: Position { line: 64, column: 32, }, end: Position { line: 64, column: 35, }, }, }, ), ], default: None, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 65, column: 15, }, end: Position { line: 65, column: 26, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 65, column: 29, }, end: Position { line: 65, column: 32, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 65, column: 33, }, end: Position { line: 65, column: 38, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "Your MaxMind account ID.\n", span: Span { start: Position { line: 66, column: 1, }, end: Position { line: 67, column: 15, }, }, }, ), ], span: Span { start: Position { line: 65, column: 39, }, end: Position { line: 67, column: 17, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 63, column: 38, }, end: Position { line: 68, column: 14, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "EditionIDs", span: Span { start: Position { line: 70, column: 13, }, end: Position { line: 70, column: 23, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 70, column: 26, }, end: Position { line: 70, column: 29, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mkOption", span: Span { start: Position { line: 70, column: 30, }, end: Position { line: 70, column: 38, }, }, }, ), ], default: None, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 71, column: 15, }, end: Position { line: 71, column: 19, }, }, }, ), ], to: With( With { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 71, column: 27, }, end: Position { line: 71, column: 30, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "types", span: Span { start: Position { line: 71, column: 31, }, end: Position { line: 71, column: 36, }, }, }, ), ], default: None, }, ), target: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "listOf", span: Span { start: Position { line: 71, column: 38, }, end: Position { line: 71, column: 44, }, }, }, ), arguments: [ FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "either", span: Span { start: Position { line: 71, column: 46, }, end: Position { line: 71, column: 52, }, }, }, ), arguments: [ Identifier( Identifier { id: "str", span: Span { start: Position { line: 71, column: 53, }, end: Position { line: 71, column: 56, }, }, }, ), Identifier( Identifier { id: "int", span: Span { start: Position { line: 71, column: 57, }, end: Position { line: 71, column: 60, }, }, }, ), ], }, ), ], }, ), span: Span { start: Position { line: 71, column: 22, }, end: Position { line: 71, column: 61, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "example", span: Span { start: Position { line: 72, column: 15, }, end: Position { line: 72, column: 22, }, }, }, ), ], to: List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "GeoLite2-ASN", span: Span { start: Position { line: 73, column: 18, }, end: Position { line: 73, column: 30, }, }, }, ), ], span: Span { start: Position { line: 73, column: 17, }, end: Position { line: 73, column: 31, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "GeoLite2-City", span: Span { start: Position { line: 74, column: 18, }, end: Position { line: 74, column: 31, }, }, }, ), ], span: Span { start: Position { line: 74, column: 17, }, end: Position { line: 74, column: 32, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "GeoLite2-Country", span: Span { start: Position { line: 75, column: 18, }, end: Position { line: 75, column: 34, }, }, }, ), ], span: Span { start: Position { line: 75, column: 17, }, end: Position { line: 75, column: 35, }, }, }, ), ], span: Span { start: Position { line: 72, column: 25, }, end: Position { line: 76, column: 16, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 77, column: 15, }, end: Position { line: 77, column: 26, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 77, column: 29, }, end: Position { line: 77, column: 32, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 77, column: 33, }, end: Position { line: 77, column: 38, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "List of database edition IDs. This includes new string\nIDs like `GeoIP2-City` and old\nnumeric IDs like `106`.\n", span: Span { start: Position { line: 78, column: 1, }, end: Position { line: 81, column: 15, }, }, }, ), ], span: Span { start: Position { line: 77, column: 39, }, end: Position { line: 81, column: 17, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 70, column: 39, }, end: Position { line: 82, column: 14, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "LicenseKey", span: Span { start: Position { line: 84, column: 13, }, end: Position { line: 84, column: 23, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 84, column: 26, }, end: Position { line: 84, column: 29, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mkOption", span: Span { start: Position { line: 84, column: 30, }, end: Position { line: 84, column: 38, }, }, }, ), ], default: None, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 85, column: 15, }, end: Position { line: 85, column: 19, }, }, }, ), ], to: With( With { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 85, column: 27, }, end: Position { line: 85, column: 30, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "types", span: Span { start: Position { line: 85, column: 31, }, end: Position { line: 85, column: 36, }, }, }, ), ], default: None, }, ), target: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "either", span: Span { start: Position { line: 85, column: 38, }, end: Position { line: 85, column: 44, }, }, }, ), arguments: [ Identifier( Identifier { id: "path", span: Span { start: Position { line: 85, column: 45, }, end: Position { line: 85, column: 49, }, }, }, ), FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "attrsOf", span: Span { start: Position { line: 85, column: 51, }, end: Position { line: 85, column: 58, }, }, }, ), arguments: [ Identifier( Identifier { id: "path", span: Span { start: Position { line: 85, column: 59, }, end: Position { line: 85, column: 63, }, }, }, ), ], }, ), ], }, ), span: Span { start: Position { line: 85, column: 22, }, end: Position { line: 85, column: 64, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 86, column: 15, }, end: Position { line: 86, column: 26, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 86, column: 29, }, end: Position { line: 86, column: 32, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 86, column: 33, }, end: Position { line: 86, column: 38, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "A file containing the MaxMind license key.\n\nAlways handled as a secret whether the value is\nwrapped in a `{ _secret = ...; }`\nattrset or not (refer to [](#opt-services.geoipupdate.settings) for\ndetails).\n", span: Span { start: Position { line: 87, column: 1, }, end: Position { line: 93, column: 15, }, }, }, ), ], span: Span { start: Position { line: 86, column: 39, }, end: Position { line: 93, column: 17, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "apply", span: Span { start: Position { line: 94, column: 15, }, end: Position { line: 94, column: 20, }, }, }, ), ], to: Function( Function { head: Simple( FunctionHeadSimple { identifier: "x", }, ), body: IfThenElse( IfThenElse { predicate: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "isAttrs", span: Span { start: Position { line: 94, column: 29, }, end: Position { line: 94, column: 36, }, }, }, ), arguments: [ Identifier( Identifier { id: "x", span: Span { start: Position { line: 94, column: 37, }, end: Position { line: 94, column: 38, }, }, }, ), ], }, ), then: Identifier( Identifier { id: "x", span: Span { start: Position { line: 94, column: 44, }, end: Position { line: 94, column: 45, }, }, }, ), else_: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "_secret", span: Span { start: Position { line: 94, column: 53, }, end: Position { line: 94, column: 60, }, }, }, ), ], to: Identifier( Identifier { id: "x", span: Span { start: Position { line: 94, column: 63, }, end: Position { line: 94, column: 64, }, }, }, ), }, ), ], span: Span { start: Position { line: 94, column: 51, }, end: Position { line: 94, column: 67, }, }, }, ), span: Span { start: Position { line: 94, column: 26, }, end: Position { line: 94, column: 67, }, }, }, ), span: Span { start: Position { line: 94, column: 23, }, end: Position { line: 94, column: 67, }, }, }, ), }, ), ], span: Span { start: Position { line: 84, column: 39, }, end: Position { line: 95, column: 14, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "DatabaseDirectory", span: Span { start: Position { line: 97, column: 13, }, end: Position { line: 97, column: 30, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 97, column: 33, }, end: Position { line: 97, column: 36, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mkOption", span: Span { start: Position { line: 97, column: 37, }, end: Position { line: 97, column: 45, }, }, }, ), ], default: None, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 98, column: 15, }, end: Position { line: 98, column: 19, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 98, column: 22, }, end: Position { line: 98, column: 25, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "types", span: Span { start: Position { line: 98, column: 26, }, end: Position { line: 98, column: 31, }, }, }, ), Raw( PartRaw { content: "path", span: Span { start: Position { line: 98, column: 32, }, end: Position { line: 98, column: 36, }, }, }, ), ], default: None, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 99, column: 15, }, end: Position { line: 99, column: 22, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "/var/lib/GeoIP", span: Span { start: Position { line: 99, column: 26, }, end: Position { line: 99, column: 40, }, }, }, ), ], span: Span { start: Position { line: 99, column: 25, }, end: Position { line: 99, column: 41, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "example", span: Span { start: Position { line: 100, column: 15, }, end: Position { line: 100, column: 22, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "/run/GeoIP", span: Span { start: Position { line: 100, column: 26, }, end: Position { line: 100, column: 36, }, }, }, ), ], span: Span { start: Position { line: 100, column: 25, }, end: Position { line: 100, column: 37, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 101, column: 15, }, end: Position { line: 101, column: 26, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 101, column: 29, }, end: Position { line: 101, column: 32, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 101, column: 33, }, end: Position { line: 101, column: 38, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "The directory to store the database files in. The\ndirectory will be automatically created, the owner\nchanged to `geoip` and permissions\nset to world readable. This applies if the directory\nalready exists as well, so don't use a directory with\nsensitive contents.\n", span: Span { start: Position { line: 102, column: 1, }, end: Position { line: 108, column: 15, }, }, }, ), ], span: Span { start: Position { line: 101, column: 39, }, end: Position { line: 108, column: 17, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 97, column: 46, }, end: Position { line: 109, column: 14, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 61, column: 21, }, end: Position { line: 111, column: 12, }, }, }, ), }, ), ], span: Span { start: Position { line: 53, column: 36, }, end: Position { line: 112, column: 10, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 28, column: 31, }, end: Position { line: 113, column: 8, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 13, column: 28, }, end: Position { line: 114, column: 6, }, }, }, ), }, ), ], span: Span { start: Position { line: 12, column: 13, }, end: Position { line: 116, column: 4, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "config", span: Span { start: Position { line: 118, column: 3, }, end: Position { line: 118, column: 9, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 118, column: 12, }, end: Position { line: 118, column: 15, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mkIf", span: Span { start: Position { line: 118, column: 16, }, end: Position { line: 118, column: 20, }, }, }, ), ], default: None, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 118, column: 21, }, end: Position { line: 118, column: 24, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "enable", span: Span { start: Position { line: 118, column: 25, }, end: Position { line: 118, column: 31, }, }, }, ), ], default: None, }, ), Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "services", span: Span { start: Position { line: 120, column: 5, }, end: Position { line: 120, column: 13, }, }, }, ), Raw( PartRaw { content: "geoipupdate", span: Span { start: Position { line: 120, column: 14, }, end: Position { line: 120, column: 25, }, }, }, ), Raw( PartRaw { content: "settings", span: Span { start: Position { line: 120, column: 26, }, end: Position { line: 120, column: 34, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "LockFile", span: Span { start: Position { line: 121, column: 7, }, end: Position { line: 121, column: 15, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "/run/geoipupdate/.lock", span: Span { start: Position { line: 121, column: 19, }, end: Position { line: 121, column: 41, }, }, }, ), ], span: Span { start: Position { line: 121, column: 18, }, end: Position { line: 121, column: 42, }, }, }, ), }, ), ], span: Span { start: Position { line: 120, column: 37, }, end: Position { line: 122, column: 6, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "systemd", span: Span { start: Position { line: 124, column: 5, }, end: Position { line: 124, column: 12, }, }, }, ), Raw( PartRaw { content: "services", span: Span { start: Position { line: 124, column: 13, }, end: Position { line: 124, column: 21, }, }, }, ), Raw( PartRaw { content: "geoipupdate-create-db-dir", span: Span { start: Position { line: 124, column: 22, }, end: Position { line: 124, column: 47, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "serviceConfig", span: Span { start: Position { line: 125, column: 7, }, end: Position { line: 125, column: 20, }, }, }, ), Raw( PartRaw { content: "Type", span: Span { start: Position { line: 125, column: 21, }, end: Position { line: 125, column: 25, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "oneshot", span: Span { start: Position { line: 125, column: 29, }, end: Position { line: 125, column: 36, }, }, }, ), ], span: Span { start: Position { line: 125, column: 28, }, end: Position { line: 125, column: 37, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "script", span: Span { start: Position { line: 126, column: 7, }, end: Position { line: 126, column: 13, }, }, }, ), ], to: IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "set -o errexit -o pipefail -o nounset -o errtrace\nshopt -s inherit_errexit\n\nmkdir -p ", span: Span { start: Position { line: 127, column: 1, }, end: Position { line: 130, column: 18, }, }, }, ), Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 130, column: 20, }, end: Position { line: 130, column: 23, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "settings", span: Span { start: Position { line: 130, column: 24, }, end: Position { line: 130, column: 32, }, }, }, ), Raw( PartRaw { content: "DatabaseDirectory", span: Span { start: Position { line: 130, column: 33, }, end: Position { line: 130, column: 50, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "\nchmod 0755 ", span: Span { start: Position { line: 127, column: 1, }, end: Position { line: 131, column: 20, }, }, }, ), Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 131, column: 22, }, end: Position { line: 131, column: 25, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "settings", span: Span { start: Position { line: 131, column: 26, }, end: Position { line: 131, column: 34, }, }, }, ), Raw( PartRaw { content: "DatabaseDirectory", span: Span { start: Position { line: 131, column: 35, }, end: Position { line: 131, column: 52, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "\n", span: Span { start: Position { line: 127, column: 1, }, end: Position { line: 132, column: 7, }, }, }, ), ], span: Span { start: Position { line: 126, column: 16, }, end: Position { line: 132, column: 9, }, }, }, ), }, ), ], span: Span { start: Position { line: 124, column: 50, }, end: Position { line: 133, column: 6, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "systemd", span: Span { start: Position { line: 135, column: 5, }, end: Position { line: 135, column: 12, }, }, }, ), Raw( PartRaw { content: "services", span: Span { start: Position { line: 135, column: 13, }, end: Position { line: 135, column: 21, }, }, }, ), Raw( PartRaw { content: "geoipupdate", span: Span { start: Position { line: 135, column: 22, }, end: Position { line: 135, column: 33, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 136, column: 7, }, end: Position { line: 136, column: 18, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "GeoIP Updater", span: Span { start: Position { line: 136, column: 22, }, end: Position { line: 136, column: 35, }, }, }, ), ], span: Span { start: Position { line: 136, column: 21, }, end: Position { line: 136, column: 36, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "requires", span: Span { start: Position { line: 137, column: 7, }, end: Position { line: 137, column: 15, }, }, }, ), ], to: List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "geoipupdate-create-db-dir.service", span: Span { start: Position { line: 137, column: 21, }, end: Position { line: 137, column: 54, }, }, }, ), ], span: Span { start: Position { line: 137, column: 20, }, end: Position { line: 137, column: 55, }, }, }, ), ], span: Span { start: Position { line: 137, column: 18, }, end: Position { line: 137, column: 57, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "after", span: Span { start: Position { line: 138, column: 7, }, end: Position { line: 138, column: 12, }, }, }, ), ], to: List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "geoipupdate-create-db-dir.service", span: Span { start: Position { line: 139, column: 10, }, end: Position { line: 139, column: 43, }, }, }, ), ], span: Span { start: Position { line: 139, column: 9, }, end: Position { line: 139, column: 44, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "network-online.target", span: Span { start: Position { line: 140, column: 10, }, end: Position { line: 140, column: 31, }, }, }, ), ], span: Span { start: Position { line: 140, column: 9, }, end: Position { line: 140, column: 32, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "nss-lookup.target", span: Span { start: Position { line: 141, column: 10, }, end: Position { line: 141, column: 27, }, }, }, ), ], span: Span { start: Position { line: 141, column: 9, }, end: Position { line: 141, column: 28, }, }, }, ), ], span: Span { start: Position { line: 138, column: 15, }, end: Position { line: 142, column: 8, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "path", span: Span { start: Position { line: 143, column: 7, }, end: Position { line: 143, column: 11, }, }, }, ), ], to: List( List { elements: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 143, column: 16, }, end: Position { line: 143, column: 20, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "replace-secret", span: Span { start: Position { line: 143, column: 21, }, end: Position { line: 143, column: 35, }, }, }, ), ], default: None, }, ), ], span: Span { start: Position { line: 143, column: 14, }, end: Position { line: 143, column: 37, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "wants", span: Span { start: Position { line: 144, column: 7, }, end: Position { line: 144, column: 12, }, }, }, ), ], to: List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "network-online.target", span: Span { start: Position { line: 144, column: 18, }, end: Position { line: 144, column: 39, }, }, }, ), ], span: Span { start: Position { line: 144, column: 17, }, end: Position { line: 144, column: 40, }, }, }, ), ], span: Span { start: Position { line: 144, column: 15, }, end: Position { line: 144, column: 42, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "startAt", span: Span { start: Position { line: 145, column: 7, }, end: Position { line: 145, column: 14, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 145, column: 17, }, end: Position { line: 145, column: 20, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "interval", span: Span { start: Position { line: 145, column: 21, }, end: Position { line: 145, column: 29, }, }, }, ), ], default: None, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "serviceConfig", span: Span { start: Position { line: 146, column: 7, }, end: Position { line: 146, column: 20, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ExecStartPre", span: Span { start: Position { line: 147, column: 9, }, end: Position { line: 147, column: 21, }, }, }, ), ], to: LetIn( LetIn { bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "isSecret", span: Span { start: Position { line: 149, column: 13, }, end: Position { line: 149, column: 21, }, }, }, ), ], to: Function( Function { head: Simple( FunctionHeadSimple { identifier: "v", }, ), body: BinaryOperation( BinaryOperation { left: BinaryOperation( BinaryOperation { left: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "isAttrs", span: Span { start: Position { line: 149, column: 27, }, end: Position { line: 149, column: 34, }, }, }, ), arguments: [ Identifier( Identifier { id: "v", span: Span { start: Position { line: 149, column: 35, }, end: Position { line: 149, column: 36, }, }, }, ), ], }, ), operator: LogicalAnd, right: HasAttribute( HasAttribute { expression: Identifier( Identifier { id: "v", span: Span { start: Position { line: 149, column: 40, }, end: Position { line: 149, column: 41, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "_secret", span: Span { start: Position { line: 149, column: 44, }, end: Position { line: 149, column: 51, }, }, }, ), ], }, ), }, ), operator: LogicalAnd, right: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "isString", span: Span { start: Position { line: 149, column: 55, }, end: Position { line: 149, column: 63, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "v", span: Span { start: Position { line: 149, column: 64, }, end: Position { line: 149, column: 65, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "_secret", span: Span { start: Position { line: 149, column: 66, }, end: Position { line: 149, column: 73, }, }, }, ), ], default: None, }, ), ], }, ), }, ), span: Span { start: Position { line: 149, column: 24, }, end: Position { line: 149, column: 73, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "geoipupdateKeyValue", span: Span { start: Position { line: 150, column: 13, }, end: Position { line: 150, column: 32, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 150, column: 35, }, end: Position { line: 150, column: 38, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "generators", span: Span { start: Position { line: 150, column: 39, }, end: Position { line: 150, column: 49, }, }, }, ), Raw( PartRaw { content: "toKeyValue", span: Span { start: Position { line: 150, column: 50, }, end: Position { line: 150, column: 60, }, }, }, ), ], default: None, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "mkKeyValue", span: Span { start: Position { line: 151, column: 15, }, end: Position { line: 151, column: 25, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 151, column: 28, }, end: Position { line: 151, column: 31, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "flip", span: Span { start: Position { line: 151, column: 32, }, end: Position { line: 151, column: 36, }, }, }, ), ], default: None, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 151, column: 37, }, end: Position { line: 151, column: 40, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "generators", span: Span { start: Position { line: 151, column: 41, }, end: Position { line: 151, column: 51, }, }, }, ), Raw( PartRaw { content: "mkKeyValueDefault", span: Span { start: Position { line: 151, column: 52, }, end: Position { line: 151, column: 69, }, }, }, ), ], default: None, }, ), String( String_ { parts: [ Raw( PartRaw { content: " ", span: Span { start: Position { line: 151, column: 71, }, end: Position { line: 151, column: 72, }, }, }, ), ], span: Span { start: Position { line: 151, column: 70, }, end: Position { line: 151, column: 73, }, }, }, ), Map( Map { recursive: true, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "mkValueString", span: Span { start: Position { line: 152, column: 17, }, end: Position { line: 152, column: 30, }, }, }, ), ], to: Function( Function { head: Simple( FunctionHeadSimple { identifier: "v", }, ), body: IfThenElse( IfThenElse { predicate: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "isInt", span: Span { start: Position { line: 153, column: 22, }, end: Position { line: 153, column: 27, }, }, }, ), arguments: [ Identifier( Identifier { id: "v", span: Span { start: Position { line: 153, column: 38, }, end: Position { line: 153, column: 39, }, }, }, ), ], }, ), then: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "toString", span: Span { start: Position { line: 153, column: 45, }, end: Position { line: 153, column: 53, }, }, }, ), arguments: [ Identifier( Identifier { id: "v", span: Span { start: Position { line: 153, column: 54, }, end: Position { line: 153, column: 55, }, }, }, ), ], }, ), else_: IfThenElse( IfThenElse { predicate: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "isString", span: Span { start: Position { line: 154, column: 27, }, end: Position { line: 154, column: 35, }, }, }, ), arguments: [ Identifier( Identifier { id: "v", span: Span { start: Position { line: 154, column: 38, }, end: Position { line: 154, column: 39, }, }, }, ), ], }, ), then: Identifier( Identifier { id: "v", span: Span { start: Position { line: 154, column: 45, }, end: Position { line: 154, column: 46, }, }, }, ), else_: IfThenElse( IfThenElse { predicate: BinaryOperation( BinaryOperation { left: Identifier( Identifier { id: "true", span: Span { start: Position { line: 155, column: 27, }, end: Position { line: 155, column: 31, }, }, }, ), operator: EqualTo, right: Identifier( Identifier { id: "v", span: Span { start: Position { line: 155, column: 38, }, end: Position { line: 155, column: 39, }, }, }, ), }, ), then: String( String_ { parts: [ Raw( PartRaw { content: "1", span: Span { start: Position { line: 155, column: 46, }, end: Position { line: 155, column: 47, }, }, }, ), ], span: Span { start: Position { line: 155, column: 45, }, end: Position { line: 155, column: 48, }, }, }, ), else_: IfThenElse( IfThenElse { predicate: BinaryOperation( BinaryOperation { left: Identifier( Identifier { id: "false", span: Span { start: Position { line: 156, column: 27, }, end: Position { line: 156, column: 32, }, }, }, ), operator: EqualTo, right: Identifier( Identifier { id: "v", span: Span { start: Position { line: 156, column: 38, }, end: Position { line: 156, column: 39, }, }, }, ), }, ), then: String( String_ { parts: [ Raw( PartRaw { content: "0", span: Span { start: Position { line: 156, column: 46, }, end: Position { line: 156, column: 47, }, }, }, ), ], span: Span { start: Position { line: 156, column: 45, }, end: Position { line: 156, column: 48, }, }, }, ), else_: IfThenElse( IfThenElse { predicate: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "isList", span: Span { start: Position { line: 157, column: 27, }, end: Position { line: 157, column: 33, }, }, }, ), arguments: [ Identifier( Identifier { id: "v", span: Span { start: Position { line: 157, column: 38, }, end: Position { line: 157, column: 39, }, }, }, ), ], }, ), then: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 157, column: 45, }, end: Position { line: 157, column: 48, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "concatMapStringsSep", span: Span { start: Position { line: 157, column: 49, }, end: Position { line: 157, column: 68, }, }, }, ), ], default: None, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: " ", span: Span { start: Position { line: 157, column: 70, }, end: Position { line: 157, column: 71, }, }, }, ), ], span: Span { start: Position { line: 157, column: 69, }, end: Position { line: 157, column: 72, }, }, }, ), Identifier( Identifier { id: "mkValueString", span: Span { start: Position { line: 157, column: 73, }, end: Position { line: 157, column: 86, }, }, }, ), Identifier( Identifier { id: "v", span: Span { start: Position { line: 157, column: 87, }, end: Position { line: 157, column: 88, }, }, }, ), ], }, ), else_: IfThenElse( IfThenElse { predicate: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "isSecret", span: Span { start: Position { line: 158, column: 27, }, end: Position { line: 158, column: 35, }, }, }, ), arguments: [ Identifier( Identifier { id: "v", span: Span { start: Position { line: 158, column: 38, }, end: Position { line: 158, column: 39, }, }, }, ), ], }, ), then: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "hashString", span: Span { start: Position { line: 158, column: 45, }, end: Position { line: 158, column: 55, }, }, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "sha256", span: Span { start: Position { line: 158, column: 57, }, end: Position { line: 158, column: 63, }, }, }, ), ], span: Span { start: Position { line: 158, column: 56, }, end: Position { line: 158, column: 64, }, }, }, ), PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "v", span: Span { start: Position { line: 158, column: 65, }, end: Position { line: 158, column: 66, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "_secret", span: Span { start: Position { line: 158, column: 67, }, end: Position { line: 158, column: 74, }, }, }, ), ], default: None, }, ), ], }, ), else_: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "throw", span: Span { start: Position { line: 159, column: 24, }, end: Position { line: 159, column: 29, }, }, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "unsupported type ", span: Span { start: Position { line: 159, column: 31, }, end: Position { line: 159, column: 59, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "typeOf", span: Span { start: Position { line: 159, column: 50, }, end: Position { line: 159, column: 56, }, }, }, ), arguments: [ Identifier( Identifier { id: "v", span: Span { start: Position { line: 159, column: 57, }, end: Position { line: 159, column: 58, }, }, }, ), ], }, ), }, ), Raw( PartRaw { content: ": ", span: Span { start: Position { line: 159, column: 31, }, end: Position { line: 159, column: 61, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 159, column: 64, }, end: Position { line: 159, column: 67, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "generators", span: Span { start: Position { line: 159, column: 68, }, end: Position { line: 159, column: 78, }, }, }, ), Raw( PartRaw { content: "toPretty", span: Span { start: Position { line: 159, column: 79, }, end: Position { line: 159, column: 87, }, }, }, ), ], default: None, }, ), arguments: [ Map( Map { recursive: false, bindings: [], span: Span { start: Position { line: 159, column: 88, }, end: Position { line: 159, column: 90, }, }, }, ), Identifier( Identifier { id: "v", span: Span { start: Position { line: 159, column: 92, }, end: Position { line: 159, column: 93, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 159, column: 30, }, end: Position { line: 159, column: 95, }, }, }, ), ], }, ), span: Span { start: Position { line: 158, column: 24, }, end: Position { line: 159, column: 95, }, }, }, ), span: Span { start: Position { line: 157, column: 24, }, end: Position { line: 159, column: 95, }, }, }, ), span: Span { start: Position { line: 156, column: 24, }, end: Position { line: 159, column: 95, }, }, }, ), span: Span { start: Position { line: 155, column: 24, }, end: Position { line: 159, column: 95, }, }, }, ), span: Span { start: Position { line: 154, column: 24, }, end: Position { line: 159, column: 95, }, }, }, ), span: Span { start: Position { line: 153, column: 19, }, end: Position { line: 159, column: 95, }, }, }, ), span: Span { start: Position { line: 152, column: 33, }, end: Position { line: 159, column: 95, }, }, }, ), }, ), ], span: Span { start: Position { line: 151, column: 74, }, end: Position { line: 160, column: 16, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 150, column: 61, }, end: Position { line: 161, column: 14, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "secretPaths", span: Span { start: Position { line: 162, column: 13, }, end: Position { line: 162, column: 24, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 162, column: 27, }, end: Position { line: 162, column: 30, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "catAttrs", span: Span { start: Position { line: 162, column: 31, }, end: Position { line: 162, column: 39, }, }, }, ), ], default: None, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "_secret", span: Span { start: Position { line: 162, column: 41, }, end: Position { line: 162, column: 48, }, }, }, ), ], span: Span { start: Position { line: 162, column: 40, }, end: Position { line: 162, column: 49, }, }, }, ), FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 162, column: 51, }, end: Position { line: 162, column: 54, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "collect", span: Span { start: Position { line: 162, column: 55, }, end: Position { line: 162, column: 62, }, }, }, ), ], default: None, }, ), arguments: [ Identifier( Identifier { id: "isSecret", span: Span { start: Position { line: 162, column: 63, }, end: Position { line: 162, column: 71, }, }, }, ), PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 162, column: 72, }, end: Position { line: 162, column: 75, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "settings", span: Span { start: Position { line: 162, column: 76, }, end: Position { line: 162, column: 84, }, }, }, ), ], default: None, }, ), ], }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "mkSecretReplacement", span: Span { start: Position { line: 163, column: 13, }, end: Position { line: 163, column: 32, }, }, }, ), ], to: Function( Function { head: Simple( FunctionHeadSimple { identifier: "file", }, ), body: IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "replace-secret ", span: Span { start: Position { line: 164, column: 1, }, end: Position { line: 164, column: 30, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 164, column: 32, }, end: Position { line: 164, column: 35, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "escapeShellArgs", span: Span { start: Position { line: 164, column: 36, }, end: Position { line: 164, column: 51, }, }, }, ), ], default: None, }, ), arguments: [ List( List { elements: [ FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "hashString", span: Span { start: Position { line: 164, column: 55, }, end: Position { line: 164, column: 65, }, }, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "sha256", span: Span { start: Position { line: 164, column: 67, }, end: Position { line: 164, column: 73, }, }, }, ), ], span: Span { start: Position { line: 164, column: 66, }, end: Position { line: 164, column: 74, }, }, }, ), Identifier( Identifier { id: "file", span: Span { start: Position { line: 164, column: 75, }, end: Position { line: 164, column: 79, }, }, }, ), ], }, ), Identifier( Identifier { id: "file", span: Span { start: Position { line: 164, column: 81, }, end: Position { line: 164, column: 85, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "/run/geoipupdate/GeoIP.conf", span: Span { start: Position { line: 164, column: 87, }, end: Position { line: 164, column: 114, }, }, }, ), ], span: Span { start: Position { line: 164, column: 86, }, end: Position { line: 164, column: 115, }, }, }, ), ], span: Span { start: Position { line: 164, column: 52, }, end: Position { line: 164, column: 117, }, }, }, ), ], }, ), }, ), Raw( PartRaw { content: "\n", span: Span { start: Position { line: 164, column: 1, }, end: Position { line: 165, column: 13, }, }, }, ), ], span: Span { start: Position { line: 163, column: 41, }, end: Position { line: 165, column: 15, }, }, }, ), span: Span { start: Position { line: 163, column: 35, }, end: Position { line: 165, column: 15, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "secretReplacements", span: Span { start: Position { line: 166, column: 13, }, end: Position { line: 166, column: 31, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 166, column: 34, }, end: Position { line: 166, column: 37, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "concatMapStrings", span: Span { start: Position { line: 166, column: 38, }, end: Position { line: 166, column: 54, }, }, }, ), ], default: None, }, ), arguments: [ Identifier( Identifier { id: "mkSecretReplacement", span: Span { start: Position { line: 166, column: 55, }, end: Position { line: 166, column: 74, }, }, }, ), Identifier( Identifier { id: "secretPaths", span: Span { start: Position { line: 166, column: 75, }, end: Position { line: 166, column: 86, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "geoipupdateConf", span: Span { start: Position { line: 168, column: 13, }, end: Position { line: 168, column: 28, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 168, column: 31, }, end: Position { line: 168, column: 35, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "writeText", span: Span { start: Position { line: 168, column: 36, }, end: Position { line: 168, column: 45, }, }, }, ), ], default: None, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "geoipupdate.conf", span: Span { start: Position { line: 168, column: 47, }, end: Position { line: 168, column: 63, }, }, }, ), ], span: Span { start: Position { line: 168, column: 46, }, end: Position { line: 168, column: 64, }, }, }, ), FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "geoipupdateKeyValue", span: Span { start: Position { line: 168, column: 66, }, end: Position { line: 168, column: 85, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 168, column: 86, }, end: Position { line: 168, column: 89, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "settings", span: Span { start: Position { line: 168, column: 90, }, end: Position { line: 168, column: 98, }, }, }, ), ], default: None, }, ), ], }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "script", span: Span { start: Position { line: 170, column: 13, }, end: Position { line: 170, column: 19, }, }, }, ), ], to: IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "set -o errexit -o pipefail -o nounset -o errtrace\nshopt -s inherit_errexit\n\nchown geoip \"", span: Span { start: Position { line: 171, column: 1, }, end: Position { line: 174, column: 28, }, }, }, ), Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 174, column: 30, }, end: Position { line: 174, column: 33, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "settings", span: Span { start: Position { line: 174, column: 34, }, end: Position { line: 174, column: 42, }, }, }, ), Raw( PartRaw { content: "DatabaseDirectory", span: Span { start: Position { line: 174, column: 43, }, end: Position { line: 174, column: 60, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "\"\n\ncp ", span: Span { start: Position { line: 171, column: 1, }, end: Position { line: 176, column: 18, }, }, }, ), Interpolation( PartInterpolation { expression: Identifier( Identifier { id: "geoipupdateConf", span: Span { start: Position { line: 176, column: 20, }, end: Position { line: 176, column: 35, }, }, }, ), }, ), Raw( PartRaw { content: " /run/geoipupdate/GeoIP.conf\n", span: Span { start: Position { line: 171, column: 1, }, end: Position { line: 177, column: 15, }, }, }, ), Interpolation( PartInterpolation { expression: Identifier( Identifier { id: "secretReplacements", span: Span { start: Position { line: 177, column: 17, }, end: Position { line: 177, column: 35, }, }, }, ), }, ), Raw( PartRaw { content: "\n", span: Span { start: Position { line: 171, column: 1, }, end: Position { line: 178, column: 13, }, }, }, ), ], span: Span { start: Position { line: 170, column: 22, }, end: Position { line: 178, column: 15, }, }, }, ), }, ), ], target: String( String_ { parts: [ Raw( PartRaw { content: "+", span: Span { start: Position { line: 180, column: 14, }, end: Position { line: 180, column: 74, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 180, column: 17, }, end: Position { line: 180, column: 21, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "writeShellScript", span: Span { start: Position { line: 180, column: 22, }, end: Position { line: 180, column: 38, }, }, }, ), ], default: None, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "start-pre-full-privileges", span: Span { start: Position { line: 180, column: 40, }, end: Position { line: 180, column: 65, }, }, }, ), ], span: Span { start: Position { line: 180, column: 39, }, end: Position { line: 180, column: 66, }, }, }, ), Identifier( Identifier { id: "script", span: Span { start: Position { line: 180, column: 67, }, end: Position { line: 180, column: 73, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 180, column: 13, }, end: Position { line: 180, column: 75, }, }, }, ), span: Span { start: Position { line: 148, column: 11, }, end: Position { line: 180, column: 75, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ExecStart", span: Span { start: Position { line: 181, column: 9, }, end: Position { line: 181, column: 18, }, }, }, ), ], to: String( String_ { parts: [ Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 181, column: 24, }, end: Position { line: 181, column: 28, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "geoipupdate", span: Span { start: Position { line: 181, column: 29, }, end: Position { line: 181, column: 40, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "/bin/geoipupdate -f /run/geoipupdate/GeoIP.conf", span: Span { start: Position { line: 181, column: 22, }, end: Position { line: 181, column: 88, }, }, }, ), ], span: Span { start: Position { line: 181, column: 21, }, end: Position { line: 181, column: 89, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "User", span: Span { start: Position { line: 182, column: 9, }, end: Position { line: 182, column: 13, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "geoip", span: Span { start: Position { line: 182, column: 17, }, end: Position { line: 182, column: 22, }, }, }, ), ], span: Span { start: Position { line: 182, column: 16, }, end: Position { line: 182, column: 23, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "DynamicUser", span: Span { start: Position { line: 183, column: 9, }, end: Position { line: 183, column: 20, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 183, column: 23, }, end: Position { line: 183, column: 27, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ReadWritePaths", span: Span { start: Position { line: 184, column: 9, }, end: Position { line: 184, column: 23, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 184, column: 26, }, end: Position { line: 184, column: 29, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "settings", span: Span { start: Position { line: 184, column: 30, }, end: Position { line: 184, column: 38, }, }, }, ), Raw( PartRaw { content: "DatabaseDirectory", span: Span { start: Position { line: 184, column: 39, }, end: Position { line: 184, column: 56, }, }, }, ), ], default: None, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "RuntimeDirectory", span: Span { start: Position { line: 185, column: 9, }, end: Position { line: 185, column: 25, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "geoipupdate", span: Span { start: Position { line: 185, column: 29, }, end: Position { line: 185, column: 40, }, }, }, ), ], span: Span { start: Position { line: 185, column: 28, }, end: Position { line: 185, column: 41, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "RuntimeDirectoryMode", span: Span { start: Position { line: 186, column: 9, }, end: Position { line: 186, column: 29, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "0700", span: Span { start: Position { line: 186, column: 33, }, end: Position { line: 186, column: 37, }, }, }, ), ], span: Span { start: Position { line: 186, column: 32, }, end: Position { line: 186, column: 38, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "CapabilityBoundingSet", span: Span { start: Position { line: 187, column: 9, }, end: Position { line: 187, column: 30, }, }, }, ), ], to: String( String_ { parts: [], span: Span { start: Position { line: 187, column: 33, }, end: Position { line: 187, column: 35, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "PrivateDevices", span: Span { start: Position { line: 188, column: 9, }, end: Position { line: 188, column: 23, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 188, column: 26, }, end: Position { line: 188, column: 30, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "PrivateMounts", span: Span { start: Position { line: 189, column: 9, }, end: Position { line: 189, column: 22, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 189, column: 25, }, end: Position { line: 189, column: 29, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "PrivateUsers", span: Span { start: Position { line: 190, column: 9, }, end: Position { line: 190, column: 21, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 190, column: 24, }, end: Position { line: 190, column: 28, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ProtectClock", span: Span { start: Position { line: 191, column: 9, }, end: Position { line: 191, column: 21, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 191, column: 24, }, end: Position { line: 191, column: 28, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ProtectControlGroups", span: Span { start: Position { line: 192, column: 9, }, end: Position { line: 192, column: 29, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 192, column: 32, }, end: Position { line: 192, column: 36, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ProtectHome", span: Span { start: Position { line: 193, column: 9, }, end: Position { line: 193, column: 20, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 193, column: 23, }, end: Position { line: 193, column: 27, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ProtectHostname", span: Span { start: Position { line: 194, column: 9, }, end: Position { line: 194, column: 24, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 194, column: 27, }, end: Position { line: 194, column: 31, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ProtectKernelLogs", span: Span { start: Position { line: 195, column: 9, }, end: Position { line: 195, column: 26, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 195, column: 29, }, end: Position { line: 195, column: 33, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ProtectKernelModules", span: Span { start: Position { line: 196, column: 9, }, end: Position { line: 196, column: 29, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 196, column: 32, }, end: Position { line: 196, column: 36, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ProtectKernelTunables", span: Span { start: Position { line: 197, column: 9, }, end: Position { line: 197, column: 30, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 197, column: 33, }, end: Position { line: 197, column: 37, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ProtectProc", span: Span { start: Position { line: 198, column: 9, }, end: Position { line: 198, column: 20, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "invisible", span: Span { start: Position { line: 198, column: 24, }, end: Position { line: 198, column: 33, }, }, }, ), ], span: Span { start: Position { line: 198, column: 23, }, end: Position { line: 198, column: 34, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "ProcSubset", span: Span { start: Position { line: 199, column: 9, }, end: Position { line: 199, column: 19, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "pid", span: Span { start: Position { line: 199, column: 23, }, end: Position { line: 199, column: 26, }, }, }, ), ], span: Span { start: Position { line: 199, column: 22, }, end: Position { line: 199, column: 27, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "SystemCallFilter", span: Span { start: Position { line: 200, column: 9, }, end: Position { line: 200, column: 25, }, }, }, ), ], to: List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "@system-service", span: Span { start: Position { line: 200, column: 31, }, end: Position { line: 200, column: 46, }, }, }, ), ], span: Span { start: Position { line: 200, column: 30, }, end: Position { line: 200, column: 47, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "~@privileged", span: Span { start: Position { line: 200, column: 49, }, end: Position { line: 200, column: 61, }, }, }, ), ], span: Span { start: Position { line: 200, column: 48, }, end: Position { line: 200, column: 62, }, }, }, ), ], span: Span { start: Position { line: 200, column: 28, }, end: Position { line: 200, column: 64, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "RestrictAddressFamilies", span: Span { start: Position { line: 201, column: 9, }, end: Position { line: 201, column: 32, }, }, }, ), ], to: List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "AF_INET", span: Span { start: Position { line: 201, column: 38, }, end: Position { line: 201, column: 45, }, }, }, ), ], span: Span { start: Position { line: 201, column: 37, }, end: Position { line: 201, column: 46, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "AF_INET6", span: Span { start: Position { line: 201, column: 48, }, end: Position { line: 201, column: 56, }, }, }, ), ], span: Span { start: Position { line: 201, column: 47, }, end: Position { line: 201, column: 57, }, }, }, ), ], span: Span { start: Position { line: 201, column: 35, }, end: Position { line: 201, column: 59, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "RestrictRealtime", span: Span { start: Position { line: 202, column: 9, }, end: Position { line: 202, column: 25, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 202, column: 28, }, end: Position { line: 202, column: 32, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "RestrictNamespaces", span: Span { start: Position { line: 203, column: 9, }, end: Position { line: 203, column: 27, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 203, column: 30, }, end: Position { line: 203, column: 34, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "MemoryDenyWriteExecute", span: Span { start: Position { line: 204, column: 9, }, end: Position { line: 204, column: 31, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 204, column: 34, }, end: Position { line: 204, column: 38, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "LockPersonality", span: Span { start: Position { line: 205, column: 9, }, end: Position { line: 205, column: 24, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 205, column: 27, }, end: Position { line: 205, column: 31, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "SystemCallArchitectures", span: Span { start: Position { line: 206, column: 9, }, end: Position { line: 206, column: 32, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "native", span: Span { start: Position { line: 206, column: 36, }, end: Position { line: 206, column: 42, }, }, }, ), ], span: Span { start: Position { line: 206, column: 35, }, end: Position { line: 206, column: 43, }, }, }, ), }, ), ], span: Span { start: Position { line: 146, column: 23, }, end: Position { line: 207, column: 8, }, }, }, ), }, ), ], span: Span { start: Position { line: 135, column: 36, }, end: Position { line: 208, column: 6, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "systemd", span: Span { start: Position { line: 210, column: 5, }, end: Position { line: 210, column: 12, }, }, }, ), Raw( PartRaw { content: "timers", span: Span { start: Position { line: 210, column: 13, }, end: Position { line: 210, column: 19, }, }, }, ), Raw( PartRaw { content: "geoipupdate-initial-run", span: Span { start: Position { line: 210, column: 20, }, end: Position { line: 210, column: 43, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "wantedBy", span: Span { start: Position { line: 211, column: 7, }, end: Position { line: 211, column: 15, }, }, }, ), ], to: List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "timers.target", span: Span { start: Position { line: 211, column: 21, }, end: Position { line: 211, column: 34, }, }, }, ), ], span: Span { start: Position { line: 211, column: 20, }, end: Position { line: 211, column: 35, }, }, }, ), ], span: Span { start: Position { line: 211, column: 18, }, end: Position { line: 211, column: 37, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "unitConfig", span: Span { start: Position { line: 212, column: 7, }, end: Position { line: 212, column: 17, }, }, }, ), Raw( PartRaw { content: "ConditionPathExists", span: Span { start: Position { line: 212, column: 18, }, end: Position { line: 212, column: 37, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "!", span: Span { start: Position { line: 212, column: 41, }, end: Position { line: 212, column: 75, }, }, }, ), Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 212, column: 44, }, end: Position { line: 212, column: 47, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "settings", span: Span { start: Position { line: 212, column: 48, }, end: Position { line: 212, column: 56, }, }, }, ), Raw( PartRaw { content: "DatabaseDirectory", span: Span { start: Position { line: 212, column: 57, }, end: Position { line: 212, column: 74, }, }, }, ), ], default: None, }, ), }, ), ], span: Span { start: Position { line: 212, column: 40, }, end: Position { line: 212, column: 76, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "timerConfig", span: Span { start: Position { line: 213, column: 7, }, end: Position { line: 213, column: 18, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "Unit", span: Span { start: Position { line: 214, column: 9, }, end: Position { line: 214, column: 13, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "geoipupdate.service", span: Span { start: Position { line: 214, column: 17, }, end: Position { line: 214, column: 36, }, }, }, ), ], span: Span { start: Position { line: 214, column: 16, }, end: Position { line: 214, column: 37, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "OnActiveSec", span: Span { start: Position { line: 215, column: 9, }, end: Position { line: 215, column: 20, }, }, }, ), ], to: Integer( Integer { value: "0", span: Span { start: Position { line: 215, column: 23, }, end: Position { line: 215, column: 24, }, }, }, ), }, ), ], span: Span { start: Position { line: 213, column: 21, }, end: Position { line: 216, column: 8, }, }, }, ), }, ), ], span: Span { start: Position { line: 210, column: 46, }, end: Position { line: 217, column: 6, }, }, }, ), }, ), ], span: Span { start: Position { line: 118, column: 32, }, end: Position { line: 218, column: 4, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "meta", span: Span { start: Position { line: 220, column: 3, }, end: Position { line: 220, column: 7, }, }, }, ), Raw( PartRaw { content: "maintainers", span: Span { start: Position { line: 220, column: 8, }, end: Position { line: 220, column: 19, }, }, }, ), ], to: List( List { elements: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 220, column: 24, }, end: Position { line: 220, column: 27, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "maintainers", span: Span { start: Position { line: 220, column: 28, }, end: Position { line: 220, column: 39, }, }, }, ), Raw( PartRaw { content: "talyz", span: Span { start: Position { line: 220, column: 40, }, end: Position { line: 220, column: 45, }, }, }, ), ], default: None, }, ), ], span: Span { start: Position { line: 220, column: 22, }, end: Position { line: 220, column: 47, }, }, }, ), }, ), ], span: Span { start: Position { line: 7, column: 1, }, end: Position { line: 221, column: 2, }, }, }, ), span: Span { start: Position { line: 3, column: 1, }, end: Position { line: 221, column: 2, }, }, }, ), span: Span { start: Position { line: 1, column: 1, }, end: Position { line: 221, column: 2, }, }, }, )