anchor.diff:          ++ map (i: "kresd@${toString i}.service") (range 1 cfg.instances);
       };
       systemd.services."kresd@".serviceConfig = {
  -      ExecStart = "${package}/bin/kresd --noninteractive "
  -        + "-c ${package}/lib/knot-resolver/distro-preconfig.lua -c ${configFile}";
  +      ExecStart = "${cfg.package}/bin/kresd --noninteractive "
  +        + "-c ${cfg.package}/lib/knot-resolver/distro-preconfig.lua -c ${configFile}";
         # Ensure /run/knot-resolver exists
         RuntimeDirectory = "knot-resolver";
         RuntimeDirectoryMode = "0770";
  
positive.code:         You can run <literal>sudo nc -U /run/knot-resolver/control/1</literal>
          and give commands interactively to kresd@1.service.
        '';
      };
      extraConfig = mkOption {
        type = types.lines;
  
negative.code:     + concatMapStrings (mkListen "doh2") cfg.listenDoH
      + cfg.extraConfig
    );
  in {
    meta.maintainers = [ maintainers.vcunat /* upstream developer */ ];
  
  