anchor.diff:  
             With preliminary self-signed certificate the webserver can be started and
             can later reload the correct ACME certificates.
  -        '';
  -      };
  -
  -      production = mkOption {
  -        type = types.bool;
  -        default = true;
  -        description = ''
  -          If set to true, use Let's Encrypt's production environment
  -          instead of the staging environment. The main benefit of the
  -          staging environment is to get much higher rate limits.
  -
  -          See
  -          <literal>https://letsencrypt.org/docs/staging-environment</literal>
  -          for more detail.
           '';
         };
   
  
positive.code:           will be created below the webroot if it doesn't exist.
            <literal>http://example.org/.well-known/acme-challenge/</literal> must also
            be available (notice unencrypted HTTP).
          '';
        };
  
  
negative.code:         '';
        };
  
        server = mkOption {
          type = types.nullOr types.str;
          default = null;
          description = ''
            ACME Directory Resource URI. Defaults to let's encrypt
            production endpoint,
            <literal>https://acme-v02.api.letsencrypt.org/directory</literal>, if unset.
          '';
        };
  
        preliminarySelfsigned = mkOption {
          type = types.bool;
          default = true;
  