anchor.diff:          User = cfg.user;
           Group = cfg.group;
           PrivateTmp = true;
  -        PermissionsStartOnly = true;
           ExecStart = "${pkg}/bin/start-confluence.sh -fg";
           ExecStop = "${pkg}/bin/stop-confluence.sh";
         };
  
positive.code: 
      users.groups."${cfg.group}" = {};
  
      systemd.services.confluence = {
        description = "Atlassian Confluence";
  
  
negative.code:       preStart = ''
          mkdir -p ${cfg.home}/{logs,work,temp,deploy}
  
          sed -e 's,port="8090",port="${toString cfg.listenPort}" address="${cfg.listenAddress}",' \
          '' + (lib.optionalString cfg.proxy.enable ''
            -e 's,protocol="org.apache.coyote.http11.Http11NioProtocol",protocol="org.apache.coyote.http11.Http11NioProtocol" proxyName="${cfg.proxy.name}" proxyPort="${toString cfg.proxy.port}" scheme="${cfg.proxy.scheme}",' \
  