anchor.diff:                        chown '${data.user}:${data.group}' '${cpath}/key.pem'
                         chmod ${rights} '${cpath}/fullchain.pem'
                         chown '${data.user}:${data.group}' '${cpath}/fullchain.pem'
  +                      chmod ${rights} '${cpath}/full.pem'
  +                      chown '${data.user}:${data.group}' '${cpath}/full.pem'
                       '';
                     serviceConfig = {
                       Type = "oneshot";
  
positive.code:           "cert.der" "cert.pem" "chain.pem" "external.sh"
            "fullchain.pem" "full.pem" "key.der" "key.pem" "account_key.json"
          ]);
          default = [ "fullchain.pem" "key.pem" "account_key.json" ];
          description = ''
            Plugins to enable. With default settings simp_le will
            store public certificate bundle in <filename>fullchain.pem</filename>
            and private key in <filename>key.pem</filename> in its state directory.
          '';
        };
  
  
negative.code:                       mv $workdir/server.key ${cpath}/key.pem
                        mv $workdir/server.crt ${cpath}/fullchain.pem
  
                        # Create full.pem for e.g. lighttpd (same format as "simp_le ... -f full.pem" creates)
                        cat "${cpath}/key.pem" "${cpath}/fullchain.pem" > "${cpath}/full.pem"
  
                        # Clean up working directory
                        rm $workdir/server.csr
                        rm $workdir/server.pass.key
  