From 682430ca600a6cda9c117c99116da7c5fef8b0f1 Mon Sep 17 00:00:00 2001
From: illustris <rharikrishnan95@gmail.com>
Date: Mon, 9 Mar 2026 11:43:48 +0530
Subject: [PATCH] vpn: init

---
 flake.nix | 31 +++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)

diff --git a/flake.nix b/flake.nix
index 5fa450d..508b6d6 100644
--- a/flake.nix
+++ b/flake.nix
@@ -175,6 +175,37 @@
 				})];
 			};
 
+			vpn = {
+				vcpu = 2;
+				mem = 2047;
+				extraModules = [({ pkgs, ... }: {
+					imports = [ self.nixosModules.storeOverlay ];
+
+					# Mount ovpn configs read-only
+					microvm.shares = [
+						{
+							proto = "9p";
+							tag = "ovpn";
+							source = "/home/illustris/Documents/ovpn/air";
+							mountPoint = "/etc/openvpn/air";
+							readOnly = true;
+						}
+					];
+
+					# OpenVPN client service
+					services.openvpn.servers.airvpn = {
+						config = ''
+							config /etc/openvpn/air/AirVPN_United-States_UDP-443.ovpn
+						'';
+						autoStart = true;
+					};
+
+					environment.systemPackages = with pkgs; [
+						openvpn
+					];
+				})];
+			};
+
 			crash = {};
 		};
 	};