anchor.diff:      "--enable-dnstap"
       "--enable-dnscrypt"
       "--enable-cachedb"
  +    "--enable-ipsecmod"
  +    "--with-ssl=${openssl}"
  +    "--with-libexpat=${expat}"
  +    "--with-libevent=${libevent}"
  +    "--with-libhiredis=${hiredis}"
       "--with-dnstap-socket-path=/run/dnstap.sock"
       "--with-pthreads"
     ];
  
positive.code:     "https://unbound.net/downloads/unbound-${version}.tar.gz"
    ];
  
    version = "1.7.0";
  in
  stdenv.mkDerivation rec {
    name = "unbound-${version}";
  
    src = fetchurl {
      urls = tarballUrls version;
      multihash = "QmZGAmDZz4SdvY3UiCDVuBofKwhBNXvSYWdYyDAQSSa3fs";
      hashOutput = false;
      sha256 = "94dd9071fb13d8ccd122a3ac67c4524a3324d0e771fc7a8a7c49af8abfb926a2";
    };
  
    buildInputs = [
      expat
      fstrm
      libevent
      libsodium
      openssl
  
negative.code: 
  , expat
  , fstrm
  , hiredis
  , libevent
  , libsodium
  , openssl
  