anchor.diff:      + concatMapStrings (mkListen "doh2") cfg.listenDoH
       + cfg.extraConfig
     );
  -
  -  package = pkgs.knot-resolver;
   in {
     meta.maintainers = [ maintainers.vcunat /* upstream developer */ ];
   
  
positive.code:         ++ map (i: "kresd@${toString i}.service") (range 1 cfg.instances);
      };
      systemd.services."kresd@".serviceConfig = {
        ExecStart = "${package}/bin/kresd --noninteractive "
          + "-c ${package}/lib/knot-resolver/distro-preconfig.lua -c ${configFile}";
        # Ensure /run/knot-resolver exists
        RuntimeDirectory = "knot-resolver";
        RuntimeDirectoryMode = "0770";
  
negative.code:         You can run <literal>sudo nc -U /run/knot-resolver/control/1</literal>
          and give commands interactively to kresd@1.service.
        '';
      };
      package = mkOption {
        default = pkgs.knot-resolver;
        type = types.package;
        description = "
          knot-resolver package to use.
        ";
      };
      extraConfig = mkOption {
        type = types.lines;
  