anchor.diff:                  )
                 );
             servicesAttr = listToAttrs services;
  -          nginxAttr = {
  -            nginx = {
  -              after = [ "acme-selfsigned-certificates.target" ];
  -              wants = [ "acme-selfsigned-certificates.target" "acme-certificates.target" ];
  -            };
  +          injectServiceDep = {
  +            after = [ "acme-selfsigned-certificates.target" ];
  +            wants = [ "acme-selfsigned-certificates.target" "acme-certificates.target" ];
             };
           in
             servicesAttr //
  -          (if config.services.nginx.enable then nginxAttr else {});
  +          (if config.services.nginx.enable then { nginx = injectServiceDep; } else {}) //
  +          (if config.services.lighttpd.enable then { lighttpd = injectServiceDep; } else {});
   
         systemd.timers = flip mapAttrs' cfg.certs (cert: data: nameValuePair
           ("acme-${cert}")
  
positive.code:                       chown '${data.user}:${data.group}' '${cpath}/key.pem'
                        chmod ${rights} '${cpath}/fullchain.pem'
                        chown '${data.user}:${data.group}' '${cpath}/fullchain.pem'
                      '';
                    serviceConfig = {
                      Type = "oneshot";
  
negative.code:           "cert.der" "cert.pem" "chain.pem" "external.sh"
            "fullchain.pem" "full.pem" "key.der" "key.pem" "account_key.json"
          ]);
          default = [ "fullchain.pem" "full.pem" "key.pem" "account_key.json" ];
          description = ''
            Plugins to enable. With default settings simp_le will
            store public certificate bundle in <filename>fullchain.pem</filename>,
            private key in <filename>key.pem</filename> and those two previous
            files combined in <filename>full.pem</filename> in its state directory.
          '';
        };
  
  