anchor.diff:  
           preStart =
             ''
  -            mkdir -m 0700 -p ${cfg.logDir}
  -
               # Get rid of old semaphores.  These tend to accumulate across
               # server restarts, eventually preventing it from restarting
               # successfully.
  
positive.code:           ExecStart = "@${pkg}/bin/httpd httpd -f ${httpdConf}";
            ExecStop = "${pkg}/bin/httpd -f ${httpdConf} -k graceful-stop";
            ExecReload = "${pkg}/bin/httpd -f ${httpdConf} -k graceful";
            Group = cfg.group;
            Type = "forking";
            PIDFile = "${runtimeDir}/httpd.pid";
  
negative.code:       "access_compat"
      ];
  
      systemd.tmpfiles.rules =
        let
          svc = config.systemd.services.httpd.serviceConfig;
        in
          [
            "d '${cfg.logDir}' 0700 ${svc.User} ${svc.Group}"
            "Z '${cfg.logDir}' - ${svc.User} ${svc.Group}"
          ];
  
      systemd.services.httpd =
        let
          vhostsACME = filter (hostOpts: hostOpts.enableACME) vhosts;
  