nix/module/StrongSwan.nix

{ pkgs, ... }: {
	environment.systemPackages = with pkgs; [
		networkmanager-l2tp
		gnome.networkmanager-l2tp
		# networkmanager_strongswan
		# strongswan
		# strongswanNM
	];
	networking.networkmanager.enableStrongSwan = true;
	services.xl2tpd.enable = true;
	services.strongswan = {
		enable = true;
		secrets = [
			"ipsec.d/ipsec.nm-l2tp.secrets"
		];
	};
	# NOTE: Try this if VPN ever breaks.
	# systemd.tmpfiles.rules = [
	# 	"L /etc/ipsec.secrets - - - - /etc/ipsec.d/ipsec.nm-l2tp.secrets"
	# ];
}