anchor.diff:        { source = "${networkmanager_openconnect}/etc/NetworkManager/VPN/nm-openconnect-service.name";
           target = "NetworkManager/VPN/nm-openconnect-service.name";
         }
  -    ] ++ pkgs.lib.optional cfg.overrideNameservers
  +    ] ++ pkgs.lib.optional (cfg.overrideNameservers || cfg.appendNameservers)
              { source = overrideNameserversScript;
                target = "NetworkManager/dispatcher.d/02overridedns";
              };
  
positive.code:         description = ''
            If enabled, any nameservers received by DHCP or configured in
            NetworkManager will be replaced by the nameservers configured
            in the <literal>networking.nameservers</literal> option.
          '';
        };
  
  
negative.code: 
    overrideNameserversScript = writeScript "02overridedns" ''
      #!/bin/sh
      ${optionalString cfg.overrideNameservers "${gnused}/bin/sed -i '/nameserver /d' /etc/resolv.conf"}
      ${concatStringsSep ";" (map (s: "echo 'nameserver ${s}' >> /etc/resolv.conf") config.networking.nameservers)}
    '';
  
  in {
  