anchor.diff:          type = types.nullOr (types.submodule ({ ... }: { options = {
             address = mkOption {
               type = types.str;
  -            description = "Resolver IP address";
  +            description = "IP address";
               example = "208.67.220.220";
             };
  +
             port = mkOption {
               type = types.int;
  -            description = "Resolver port";
  +            description = "Port";
               default = 443;
             };
  +
             name = mkOption {
               type = types.str;
  -            description = "Provider fully qualified domain name";
  +            description = "Fully qualified domain name";
               example = "2.dnscrypt-cert.opendns.com";
             };
  +
             key = mkOption {
               type = types.str;
  -            description = "Provider public key";
  +            description = "Public key";
               example = "B735:1140:206F:225D:3E2B:D822:D7FD:691E:A1C3:3CC8:D666:8D0C:BE04:BFAB:CA43:FB79";
             };
           }; }));
         };
  +
         tcpOnly = mkOption {
           default = false;
           type = types.bool;
  
positive.code:         };
          defaultText = "pkgs.fetchurl { url = ...; sha256 = ...; }";
        };
        customResolver = mkOption {
          default = null;
          description = ''
  
negative.code:           extensions, and claims to not keep logs.
          '';
        };
  
        resolverList = mkOption {
          description = ''
            The list of upstream DNSCrypt resolvers. By default, we use the most
  