anchor.diff:        assertion = cfg.usersFile != null -> cfg.aclUse != false;
         message = "services.dokuwiki.${hostName}.aclUse must be true when usersFile is not null";
       }
  -    {
  -      assertion = cfg.aclUse -> cfg.usersFile != null;
  -      message = "services.dokuwiki.${hostName}.usersFile must be set if aclUse is true";
  -    }]) eachSite);
  +    ]) eachSite);
   
       services.phpfpm.pools = mapAttrs' (hostName: cfg: (
         nameValuePair "dokuwiki-${hostName}" {
  
positive.code:     };
  
      systemd.tmpfiles.rules = flatten (mapAttrsToList (hostName: cfg: [
        "d ${stateDir cfg}/attic 0750 ${user} ${group} - -"
        "d ${stateDir cfg}/cache 0750 ${user} ${group} - -"
        "d ${stateDir cfg}/index 0750 ${user} ${group} - -"
        "d ${stateDir cfg}/locks 0750 ${user} ${group} - -"
        "d ${stateDir cfg}/media 0750 ${user} ${group} - -"
        "d ${stateDir cfg}/media_attic 0750 ${user} ${group} - -"
        "d ${stateDir cfg}/media_meta 0750 ${user} ${group} - -"
        "d ${stateDir cfg}/meta 0750 ${user} ${group} - -"
        "d ${stateDir cfg}/pages 0750 ${user} ${group} - -"
        "d ${stateDir cfg}/tmp 0750 ${user} ${group} - -"
      ]) eachSite);
    };
  }
  
negative.code:   inherit (lib) concatMapStringsSep flatten mapAttrs mapAttrs' mapAttrsToList nameValuePair concatMapStringSep;
  
    eachSite = config.services.dokuwiki;
  
    user = config.services.nginx.user;
    group = config.services.nginx.group;
  