{
  pkgs,
  lib,
  config,
  ...
}:
let
  enabled = config.mod.openvpn.enable;
in
{
  options = {
    mod.openvpn = {
      enable = lib.mkEnableOption "enable openpn module";
    };
  };

  config = lib.mkIf enabled {
    home-manager.users.alex = {
      home.packages = [
        pkgs.openvpn
      ];
    };

    services.resolved = {
      enable = true;
      settings = {
        Resolve = {
          Domains = [ "~." ];
          DNSSEC = false;
          DNSOverTLS = true;
        };
      };

    };
  };
}