anchor.diff:        # certs are updated _after_ config has been reloaded.
         before = sslTargets;
         after = sslServices;
  +      restartTriggers = [ cfg.configFile ];
         # Block reloading if not all certs exist yet.
         # Happens when config changes add new vhosts/certs.
         unitConfig.ConditionPathExists = map (certName: certs.${certName}.directory + "/fullchain.pem") dependentCertNames;
  
positive.code:       }) (filter (hostOpts: hostOpts.useACMEHost == null) acmeEnabledVhosts);
      in listToAttrs acmePairs;
  
      environment.systemPackages = [
        apachectl
        pkg
  
negative.code:         Type = "oneshot";
          TimeoutSec = 60;
          ExecCondition = "/run/current-system/systemd/bin/systemctl -q is-active httpd.service";
          ExecStartPre = "${pkg}/bin/httpd -f /etc/httpd/httpd.conf -t";
          ExecStart = "/run/current-system/systemd/bin/systemctl reload httpd.service";
        };
      };
  