anchor.diff:  let
   
     cfg = config.services.unbound;
  -
  -  username = "unbound";
   
     stateDir = "/var/lib/unbound";
   
  
positive.code:     environment.systemPackages = [ pkgs.unbound ];
  
      users.extraUsers = singleton {
        name = username;
        uid = config.ids.uids.unbound;
        description = "unbound daemon user";
        home = stateDir;
  
negative.code:   confFile = pkgs.writeText "unbound.conf" ''
      server:
        directory: "${stateDir}"
        username: unbound
        chroot: "${stateDir}"
        pidfile: ""
        ${interfaces}
        ${access}
      ${cfg.extraConfig}
      ${forward}
    '';
  
  in
  