anchor.diff:          # Runtime directory and mode
           RuntimeDirectory = "nginx";
           RuntimeDirectoryMode = "0750";
  +        # Cache directory and mode
  +        CacheDirectory = "nginx";
  +        CacheDirectoryMode = "0750";
  +        # Logs directory and mode
  +        LogsDirectory = "nginx";
  +        LogsDirectoryMode = "0750";
           # Capabilities
           AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" "CAP_SYS_RESOURCE" ];
         };
  
positive.code:     then "/etc/nginx/nginx.conf"
      else configFile;
  
    execCommand = "${cfg.package}/bin/nginx -c '${configPath}' -p '${cfg.stateDir}'";
  
    vhosts = concatStringsSep "\n" (mapAttrsToList (vhostName: vhost:
      let
  
negative.code:           services.nginx.virtualHosts.<name>.useACMEHost are mutually exclusive.
          '';
        }
      ];
  
      systemd.services.nginx = {
  