anchor.diff:    config = mkIf cfg.enable {
       nixsap.deployment.keyrings.root = keys;
       users.users.icingaweb2.extraGroups = mkIf localIcinga [ config.nixsap.apps.icinga2.commandGroup ];
  -    nixsap.apps.php-fpm.icingaweb2.pool =
  -      recursiveUpdate defaultPool (cfg.fpmPool // { user = cfg.user ;});
  +
  +    nixsap.apps.php-fpm.icingaweb2 = mkOverride 0 {
  +      inherit (cfg.php-fpm) package;
  +      pool = recursiveUpdate defaultPool (cfg.php-fpm.pool // { user = cfg.user ;});
  +    };
   
       nixsap.apps.nginx.http.servers.icingaweb2 = ''
         ${cfg.nginxServer}
  
positive.code: 
  let
  
    inherit (lib) types
      mkIf mkOption mkEnableOption mkDefault hasPrefix
      concatMapStringsSep filterAttrs recursiveUpdate mapAttrsToList
      concatStringsSep isString genAttrs attrNames
      optionalString mkOptionType any;
    inherit (types)
      bool str int lines path either
      nullOr attrsOf listOf enum submodule unspecified;
    inherit (builtins) toString;
  
    localIcinga = config.nixsap.apps.icinga2.enable;
  
  
negative.code:       type = path;
        default = "/icingaweb2";
      };
      php-fpm = {
        package = mkOption {
          description = "PHP package to use";
          type = package;
          default = pkgs.php;
        };
        pool = mkOption {
          description = "Options for the PHP FPM pool";
          type = attrsOf unspecified;
          default = {};
        };
      };
  
      resources = mkOption {
  