anchor.diff:            Listen on this port.
           '';
         };
  -
         resolverName = mkOption {
           default = "opendns";
           type = types.string;
  
positive.code:         PrivateDevices = true;
        };
      };
  
    };
  }
  
negative.code: in
  
  {
    options = {
      services.dnscrypt-proxy = {
        enable = mkOption {
          default = false;
          type = types.bool;
          description = ''
            Enable dnscrypt-proxy. The proxy relays regular DNS queries to a
            DNSCrypt enabled upstream resolver. The traffic between the
            client and the upstream resolver is encrypted and authenticated,
            which may mitigate the risk of MITM attacks and third-party
            snooping (assuming the upstream is trustworthy).
          '';
        };
        localAddress = mkOption {
          default = "127.0.0.1";
          type = types.string;
  