anchor.diff:            Listen for DNS queries on this address.
           '';
         };
  -
         port = mkOption {
           default = 53;
           type = types.int;
  
positive.code:         PrivateDevices = true;
        };
      };
  
    };
  }
  
negative.code:     };
      users.extraGroups.dnscrypt-proxy.gid = config.ids.gids.dnscrypt-proxy;
  
      systemd.sockets.dnscrypt-proxy = {
        description = "dnscrypt-proxy listening socket";
        socketConfig = {
          ListenStream = "${cfg.localAddress}:${toString cfg.port}";
          ListenDatagram = "${cfg.localAddress}:${toString cfg.port}";
        };
        wantedBy = [ "sockets.target" ];
      };
  
      systemd.services.dnscrypt-proxy = {
        description = "dnscrypt-proxy daemon";
        after = [ "network.target" ] ++ optional apparmorEnabled "apparmor.service";
        requires = [ "dnscrypt-proxy.socket "] ++ optional apparmorEnabled "apparmor.service";
        serviceConfig = {
          Type = "simple";
          NonBlocking = "true";
          ExecStart = "${dnscrypt-proxy}/bin/dnscrypt-proxy ${toString daemonArgs}";
          User = "dnscrypt-proxy";
  