anchor.diff:  $ chown root:root /srv/webanno/webanno.conf
   ----
   +
  -* Change the owner/group of `/srv/webanno/webanno.jar` to `www-data`. When the service is started,
  -  it will run with the privileges of the user that owns the JAR file, i.e. in this case {product-name}
  -  will run as under the `www-data` user. **Do NOT run {product-name} as root.**
  +* We will run {product-name} as the user `www-data`. Change the owner/group of `/srv/webanno/webanno.jar` to `www-data`. When the service is started,
  +  **Do NOT run {product-name} as root.**
   +
   [source,bash]
   ----
  
positive.code: These are *optional* instructions if you want to run {product-name} behind an Apache web-server instead
  of accessing it directly. This assumes that you already have the following packages installed:
  
  * Apache HTTP Web Server
  * mod_proxy
  * mod_proxy_ajp
  
  
negative.code: $ chmod +x /srv/webanno/webanno.jar
  ----
  +
  * Create a file in `/etc/systemd/system/webanno.service` with the following content:
  +
  [source,bash]
  ----
  [Unit]
  Description=WebAnno
  
  [Service]
  ExecStart=/srv/webanno/webanno.jar
  User=www-data
  
  [Install]
  WantedBy=multi-user.target
  ----
  +
  * Enable the {product-name} service using
  