anchor.diff:          ${pkgs.lz4}/lib/liblz4.so.* mr,
           ${pkgs.attr.out}/lib/libattr.so.* mr,
   
  -        ${resolverListFile} r,
  +        ${cfg.resolverList} r,
         }
       ''));
   
  
positive.code:   apparmorEnabled = config.security.apparmor.enable;
    dnscrypt-proxy = pkgs.dnscrypt-proxy;
    cfg = config.services.dnscrypt-proxy;
  
    # last updated: 2016-05-04
    resolverListFile = pkgs.fetchurl {
      url = "https://raw.githubusercontent.com/jedisct1/dnscrypt-proxy/master/dnscrypt-resolvers.csv";
      sha256 = "07kbbisrvrqdxif3061hxj3whin3llg4nh50ln7prisi2vbd76xd";
    };
  
    localAddress = "${cfg.localAddress}:${toString cfg.localPort}";
  
  
negative.code:         "--provider-key=${cfg.customResolver.key}"
        ]
      else
        [ "--resolvers-list=${cfg.resolverList}"
          "--resolver-name=${toString cfg.resolverName}"
        ];
  in
  