anchor.diff:        # certs are updated _after_ config has been reloaded.
         before = sslTargets;
         after = sslServices;
  +      restartTriggers = [ cfg.configFile ];
         # Block reloading if not all certs exist yet.
         # Happens when config changes add new vhosts/certs.
         unitConfig.ConditionPathExists = map (certName: certs.${certName}.directory + "/fullchain.pem") dependentCertNames;
  
positive.code:         Type = "oneshot";
          TimeoutSec = 60;
          ExecCondition = "/run/current-system/systemd/bin/systemctl -q is-active httpd.service";
          ExecStartPre = "${pkg}/bin/httpd -f ${httpdConf} -t";
          ExecStart = "/run/current-system/systemd/bin/systemctl reload httpd.service";
        };
      };
  
negative.code:           '';
  
          serviceConfig = {
            ExecStart = "@${pkg}/bin/httpd httpd -f /etc/httpd/httpd.conf";
            ExecStop = "${pkg}/bin/httpd -f /etc/httpd/httpd.conf -k graceful-stop";
            ExecReload = "${pkg}/bin/httpd -f /etc/httpd/httpd.conf -k graceful";
            User = cfg.user;
            Group = cfg.group;
            Type = "forking";
  