{ config, pkgs, ... }: { environment.systemPackages = with pkgs; [ wireguard-tools ]; services = { mullvad-vpn = { enable = true; package = pkgs.mullvad-vpn; }; tor = { enable = false; }; }; networking = { networkmanager = { enable = true; }; firewall = { enable = false; checkReversePath = false; allowedTCPPorts = []; allowedUDPPorts = []; }; }; }