anchor.diff:            TCP instead of UDP (on port 443). Use only if the UDP port is blocked.
           '';
         };
  +
         ephemeralKeys = mkOption {
           default = false;
           type = types.bool;
  
positive.code:           of other machines (typically on the local network).
          '';
        };
        localPort = mkOption {
          default = 53;
          type = types.int;
  
negative.code:           extensions, and claims to not keep logs.
          '';
        };
  
        resolverList = mkOption {
          description = ''
            The list of upstream DNSCrypt resolvers. By default, we use the most
  