# self-hosted vpn { config, lib, ... }: let cfg = config.my.services.vpn; in { options.my.services.vpn = with lib; { enable = mkEnableOption "Headscale VPN Setup"; }; config = lib.mkIf cfg.enable ( lib.mkMerge [ { services.tailscale.enable = true; } ] ); }