anchor.diff:            fastcgi_pass unix:${phpSocket};
           '';
           # Any other attempt to access any php files is forbidden
  -        locations."~* ^.+\.php$".extraConfig = ''
  +        locations."~* ^.+\\.php$".extraConfig = ''
             return 403;
           '';
           # Disallow access to unneeded directories
  
positive.code:         default = null;
          example = {
            serverAliases = [
              "matomo.$\{config.networking.domain\}"
              "stats.$\{config.networking.domain\}"
            ];
            enableACME = false;
          };
  
negative.code:             Either this option or the webServerUser option is mandatory.
              Set this to {} to just enable the virtualHost if you don't need any customization.
              If enabled, then by default, the <option>serverName</option> is
              <literal>${user}.''${config.networking.hostName}.''${config.networking.domain}</literal>,
              SSL is active, and certificates are acquired via ACME.
              If this is set to null (the default), no nginx virtualHost will be configured.
          '';
  