workstations: Add mullvad-vpn

configurations/fuyuki/default.nix

@@ -18,6 +18,8 @@
     wg0Private.file = ../../secrets/fuyuki-wg0.age;
   };
 
+  my.connection.vpn.enable = true;
+
   my.users = {
     dala = {
       description = "Dala";

configurations/london/default.nix

@@ -54,6 +54,8 @@
     ];
   };
 
+  my.connection.vpn.enable = true;
+
   # User config
   my.users = {
     dala = {

modules/workstation/default.nix

@@ -14,6 +14,7 @@
     ./bluetooth.nix
     ./wireshark.nix
     ./ssh.nix
+    ./vpn.nix
   ];
 
   config =

modules/workstation/vpn.nix

@@ -0,0 +1,24 @@
+{
+  pkgs,
+  lib,
+  config,
+  ...
+}:
+let
+  vpnConfigEnable = config.my.connection.vpn.enable;
+in
+with lib;
+{
+  options.my.connection.vpn.enable = mkOption {
+    type = types.bool;
+    default = false;
+    description = "Enable the Mullvad VPN stack.";
+  };
+
+  config = mkIf vpnConfigEnable {
+    services.mullvad-vpn = {
+      enable = true;
+      package = pkgs.mullvad-vpn;
+    };
+  };
+}