server-configuration/services/vpn.nix

{pkgs, ...}: {
  services.mullvad-vpn.enable = true;
  environment.systemPackages = [pkgs.wireguard-tools];
}