nix/module/StrongSwan.nix

{ pkgs, lib, config, ... }: with lib; let
	cfg = config.module.strongswan;
in {
	options = {
		module.strongswan.enable = mkEnableOption "StrongSwan Vpn support.";
	};

	config = mkIf cfg.enable {
		environment.systemPackages = with pkgs; [
			networkmanager-l2tp
			gnome.networkmanager-l2tp
			# networkmanager_strongswan
			# strongswan
			# strongswanNM
		];
		networking.networkmanager.enableStrongSwan = true;
		services.xl2tpd.enable = true;
		services.strongswan = {
			enable = true;
			secrets = [
				"ipsec.d/ipsec.nm-l2tp.secrets"
			];
		};
		# NOTE: Try this if VPN ever breaks.
		# systemd.tmpfiles.rules = [
		# 	"L /etc/ipsec.secrets - - - - /etc/ipsec.d/ipsec.nm-l2tp.secrets"
		# ];
	};
}