anchor.diff: -{ outInterface }:
  +{ outInterface, nameserver ? null }:
   { config, pkgs, lib, ... }:
   let
  +  xpra = pkgs.xpra.overrideDerivation (old: {
  +    propagatedBuildInputs = old.propagatedBuildInputs ++ [ pkgs.python3Packages.pyinotify ];
  +  });
     start_xpra = pkgs.writeScriptBin "start_xpra" ''
       #!${pkgs.stdenv.shell}
   
       set -e
   
  -    sudo -iu browser xpra start --video-encoders=rgb24 --daemon=no --exit-with-children=yes --start-child=$1 ''${@:2}
  +    sudo -iu browser ${xpra}/bin/xpra start --daemon=no --exit-with-children=yes --start-child=$1 ''${@:2}
     '';
     start_vpn_container = pkgs.writeScriptBin "start_vpn_container" ''
       #!${pkgs.stdenv.shell}
  
positive.code:       hardware.opengl.enable = true;
        hardware.opengl.extraPackages = config.hardware.opengl.extraPackages;
        networking.firewall.enable = false;
        boot.kernelPackages = pkgs.linuxPackages_latest;
      };
    };
    system.activationScripts.container_vpn_startup = ''
  
negative.code:     sudo nixos-container run vpn -- protonvpn c -f
      sudo nixos-container run vpn -- start_xpra $@ &
  
      while ! ${pkgs.socat}/bin/socat -u OPEN:/dev/null UNIX-CONNECT:/run/xpra-vpn/vpn-0
      do
        echo "Waiting for /run/xpra-vpn/vpn-0 ..."
        sleep 1
      done
  
      ${xpra}/bin/xpra attach --opengl=yes --video-encoders=rgb24 socket:///run/xpra-vpn/vpn-0
  
      sudo nixos-container run vpn -- protonvpn d
    '';
  