{ pkgs, ... }: {
  services.resolved.enable = true;
  programs.openvpn3.enable = true;
}