anchor.diff:                  };
                 in (
                   [ { name = "acme-${cert}"; value = acmeService; } ]
  -                ++
  -                (if cfg.preliminarySelfsigned
  -                  then [ { name = "acme-selfsigned-${cert}"; value = selfsignedService; } ]
  -                  else []
  -                )
  +                ++ optional cfg.preliminarySelfsigned { name = "acme-selfsigned-${cert}"; value = selfsignedService; }
  +                ++ optional (data.activationDelay != null) { name = "acme-setlive-${cert}"; value = delayService; }
                 );
             servicesAttr = listToAttrs services;
             injectServiceDep = {
  
positive.code:                     exit "$EXITCODE"
                    '';
                    postStop = ''
                      if [ -e /tmp/lastExitCode ] && [ "$(cat /tmp/lastExitCode)" = "0" ]; then
                        echo "Executing postRun hook..."
                        ${data.postRun}
                      fi
                    '';
  
                    before = [ "acme-certificates.target" ];
                    wantedBy = [ "acme-certificates.target" ];
                  };
                  selfsignedService = {
                    description = "Create preliminary self-signed certificate for ${cert}";
  
negative.code:         default = "";
          example = "systemctl reload nginx.service";
          description = ''
            Commands to run after new certificates go live. Typically
            the web server and other servers using certificates need to
            be reloaded.
  
            Executed in the same directory with the new certificate.
          '';
        };
  
  