anchor.diff:        "access_compat"
       ];
   
  +    systemd.tmpfiles.rules =
  +      let
  +        svc = config.systemd.services.httpd.serviceConfig;
  +      in
  +        [
  +          "d '${cfg.logDir}' 0700 ${svc.User} ${svc.Group}"
  +          "Z '${cfg.logDir}' - ${svc.User} ${svc.Group}"
  +        ];
  +
       systemd.services.httpd =
         let
           vhostsACME = filter (hostOpts: hostOpts.enableACME) vhosts;
  
positive.code:           ExecStart = "@${pkg}/bin/httpd httpd -f ${httpdConf}";
            ExecStop = "${pkg}/bin/httpd -f ${httpdConf} -k graceful-stop";
            ExecReload = "${pkg}/bin/httpd -f ${httpdConf} -k graceful";
            Group = cfg.group;
            Type = "forking";
            PIDFile = "${runtimeDir}/httpd.pid";
  
negative.code: 
          preStart =
            ''
              # Get rid of old semaphores.  These tend to accumulate across
              # server restarts, eventually preventing it from restarting
              # successfully.
  