anchor.diff:          mkdir -m 0755 -p ${stateDir}/dev/
           cp ${confFile} ${stateDir}/unbound.conf
           ${optionalString cfg.enableRootTrustAnchor ''
  -          ${pkgs.unbound}/bin/unbound-anchor -a ${rootTrustAnchorFile} || echo "Root anchor updated!"
  +          ${cfg.package}/bin/unbound-anchor -a ${rootTrustAnchorFile} || echo "Root anchor updated!"
             chown unbound ${stateDir} ${rootTrustAnchorFile}
           ''}
           touch ${stateDir}/dev/random
  
positive.code: 
    config = mkIf cfg.enable {
  
      environment.systemPackages = [ pkgs.unbound ];
  
      users.users.unbound = {
        description = "unbound daemon user";
  
negative.code: 
        enable = mkEnableOption "Unbound domain name server";
  
        package = mkOption {
          type = types.package;
          default = pkgs.unbound;
          defaultText = "pkgs.unbound";
          description = "The unbound package to use";
        };
  
        allowedAccess = mkOption {
          default = [ "127.0.0.0/24" ];
          type = types.listOf types.str;
  