anchor.diff:      environment.systemPackages = [ pkgs.unbound ];
   
       users.extraUsers = singleton {
  -      name = username;
  +      name = "unbound";
         uid = config.ids.uids.unbound;
         description = "unbound daemon user";
         home = stateDir;
  
positive.code:       wants = [" nss-lookup.target" ];
        wantedBy = [ "multi-user.target" ];
  
        path = [ pkgs.unbound ];
        serviceConfig.ExecStart = "${pkgs.unbound}/sbin/unbound -d -c ${confFile}";
      };
  
    };
  
negative.code:   confFile = pkgs.writeText "unbound.conf" ''
      server:
        directory: "${stateDir}"
        username: unbound
        chroot: "${stateDir}"
        pidfile: ""
        ${interfaces}
        ${access}
      ${cfg.extraConfig}
      ${forward}
    '';
  
  in
  