anchor.diff:          ${pkgs.lz4}/lib/liblz4.so.* mr,
           ${pkgs.attr.out}/lib/libattr.so.* mr,
   
  -        ${resolverListFile} r,
  +        ${cfg.resolverList} r,
         }
       ''));
   
  
positive.code:         default = "dnscrypt.eu-nl";
          type = types.nullOr types.string;
          description = ''
            The name of the upstream DNSCrypt resolver to use. See
            <filename>${resolverListFile}</filename> for alternative resolvers.
            The default resolver is located in Holland, supports DNS security
            extensions, and claims to not keep logs.
          '';
        };
        customResolver = mkOption {
          default = null;
  
negative.code:   apparmorEnabled = config.security.apparmor.enable;
    dnscrypt-proxy = pkgs.dnscrypt-proxy;
    cfg = config.services.dnscrypt-proxy;
  
    localAddress = "${cfg.localAddress}:${toString cfg.localPort}";
  
  