anchor.diff:            ExecStart = "@${pkg}/bin/httpd httpd -f ${httpdConf}";
             ExecStop = "${pkg}/bin/httpd -f ${httpdConf} -k graceful-stop";
             ExecReload = "${pkg}/bin/httpd -f ${httpdConf} -k graceful";
  +          User = "root";
             Group = cfg.group;
             Type = "forking";
             PIDFile = "${runtimeDir}/httpd.pid";
  
positive.code:       "access_compat"
      ];
  
      systemd.services.httpd =
        let
          vhostsACME = filter (hostOpts: hostOpts.enableACME) vhosts;
  
negative.code: 
          preStart =
            ''
              # Get rid of old semaphores.  These tend to accumulate across
              # server restarts, eventually preventing it from restarting
              # successfully.
  