anchor.diff:      <Directory />
           Options FollowSymLinks
           AllowOverride None
  -        Order deny,allow
  -        Deny from all
  +        ${allDenied}
       </Directory>
   
       # But do allow access to files in the store so that we don't have
       # to generate <Directory> clauses for every generated file that we
       # want to serve.
       <Directory /nix/store>
  -        Order allow,deny
  -        Allow from all
  +        ${allGranted}
       </Directory>
   
       # Generate directives for the main server.
  
positive.code:       <Directory "${documentRoot}">
            Options Indexes FollowSymLinks
            AllowOverride None
            Order allow,deny
            Allow from all
        </Directory>
      '';
  
  
negative.code:     ]
      ++ optionals (!versionOlder httpd.version "2.4") [
        "mpm_${mainCfg.multiProcessingModule}"
        "authz_core"
        "unixd"
      ]
      ++ (if mainCfg.multiProcessingModule == "prefork" then [ "cgi" ] else [ "cgid" ])
      ++ optional enableSSL "ssl"
      ++ extraApacheModules;
  
  
    allDenied = if versionOlder httpd.version "2.4" then ''
      Order deny,allow
      Deny from all
    '' else ''
      Require all denied
    '';
  
    allGranted = if versionOlder httpd.version "2.4" then ''
      Order allow,deny
      Allow from all
    '' else ''
      Require all granted
    '';
  
  
    loggingConf = ''
  