anchor.diff:        '';
   
         serviceConfig = {
  -        ExecStart = "${pkgs.unbound}/bin/unbound -d -c ${stateDir}/unbound.conf";
  +        ExecStart = "${cfg.package}/bin/unbound -d -c ${stateDir}/unbound.conf";
           ExecStopPost="${pkgs.utillinux}/bin/umount ${stateDir}/dev/random";
   
           ProtectSystem = true;
  
positive.code: 
        enable = mkEnableOption "Unbound domain name server";
  
        allowedAccess = mkOption {
          default = [ "127.0.0.0/24" ];
          type = types.listOf types.str;
  
negative.code: 
    config = mkIf cfg.enable {
  
      environment.systemPackages = [ cfg.package ];
  
      users.users.unbound = {
        description = "unbound daemon user";
  