anchor.diff:        serviceConfig.UMask = "0007";
       };
   
  -    services.phpfpm.poolConfigs = let
  +    services.phpfpm.pools = let
         # workaround for when both are null and need to generate a string,
         # which is illegal, but as assertions apparently are being triggered *after* config generation,
         # we have to avoid already throwing errors at this previous stage.
         socketOwner = if (cfg.nginx != null) then config.services.nginx.user
         else if (cfg.webServerUser != null) then cfg.webServerUser else "";
       in {
  -      ${pool} = ''
  -        listen = "${phpSocket}"
  -        listen.owner = ${socketOwner}
  -        listen.group = root
  -        listen.mode = 0600
  -        user = ${user}
  -        env[PIWIK_USER_PATH] = ${dataDir}
  -        ${cfg.phpfpmProcessManagerConfig}
  -      '';
  +      ${pool} = {
  +        socketName = "${pool}";
  +        phpPackage = pkgs.php;
  +        user = "${user}";
  +        group = "${group}";
  +        extraConfig = ''
  +          listen.owner = ${socketOwner}
  +          listen.group = ${group}
  +          listen.mode = 0600
  +          env[PIWIK_USER_PATH] = ${dataDir}
  +          ${cfg.phpfpmProcessManagerConfig}
  +        '';
  +      };
       };
   
   
  
positive.code:           echo "Migrating from ${deprecatedDataDir} to ${dataDir}"
            mv -T ${deprecatedDataDir} ${dataDir}
          fi
          chown -R ${user}:${user} ${dataDir}
          chmod -R ug+rwX,o-rwx ${dataDir}
          '';
        script = ''
  
negative.code:       isSystemUser = true;
        createHome = true;
        home = dataDir;
        group  = "${group}";
      };
      users.users.${config.services.nginx.user} = {
        extraGroups = [ "${group}" ];
      };
      users.groups.${group} = {};
  
      systemd.services.matomo-setup-update = {
        # everything needs to set up and up to date before Matomo php files are executed
  