···1717{
1818 options = {
1919 services.dnscrypt-proxy = {
2020- enable = mkOption {
2121- default = false;
2222- type = types.bool;
2323- description = ''
2424- Enable dnscrypt-proxy. The proxy relays regular DNS queries to a
2525- DNSCrypt enabled upstream resolver. The traffic between the
2626- client and the upstream resolver is encrypted and authenticated,
2727- which may mitigate the risk of MITM attacks and third-party
2828- snooping (assuming the upstream is trustworthy).
2929- '';
3030- };
2020+ enable = mkEnableOption ''
2121+ Enable dnscrypt-proxy. The proxy relays regular DNS queries to a
2222+ DNSCrypt enabled upstream resolver. The traffic between the
2323+ client and the upstream resolver is encrypted and authenticated,
2424+ which may mitigate the risk of MITM attacks and third-party
2525+ snooping (assuming the upstream is trustworthy).
2626+ '';
3127 localAddress = mkOption {
3228 default = "127.0.0.1";
3329 type = types.string;