anchor.diff:  
       networking.resolvconf.useLocalResolver = mkDefault true;
   
  +
  +    environment.etc."unbound/unbound.conf".source = confFile;
  +
       systemd.services.unbound = {
         description = "Unbound recursive Domain Name Server";
         after = [ "network.target" ];
  
positive.code:       interfaces = mkOption {
          default = [ "127.0.0.1" ] ++ optional config.networking.enableIPv6 "::1";
          type = types.listOf types.str;
          description = "What addresses the server should listen on.";
        };
  
        forwardAddresses = mkOption {
          default = [ ];
          type = types.listOf types.str;
          description = "What servers to forward queries to.";
        };
  
negative.code: { config, lib, pkgs, ... }:
  
  with lib;
  let
    cfg = config.services.unbound;
  
    stateDir = "/var/lib/unbound";
  