add a modular more modular vpn config

hosts/othalan/default.nix

@@ -5,7 +5,6 @@
   ...
 }: {
   imports = with inputs.self.nixosModules; [
-    common
     desktop
     hyprland
 
@@ -20,6 +19,9 @@
     node
     tex
   ];
+  services.vpn.enable = true;
+
+
   services.restic.backups.gdrive = {
     user = "daylin";
     repository = "rclone:g:archives/othalan";
@@ -31,9 +33,6 @@
     zk
     rclone
     quarto
-
-    expect
-    openconnect
   ];
 
   programs.gnupg.agent = {

modules/roles/desktop.nix

@@ -8,6 +8,7 @@
     common
     gui
     vscode
+    vpn
     # qtile
   ];
 }

modules/vpn.nix

@@ -0,0 +1,13 @@
+{config, lib,pkgs,...}:
+let
+  inherit (lib) mkEnableOption mkIf;
+  cfg = config.services.vpn;
+in {
+  options.services.vpn.enable = mkEnableOption ''
+    use openconnect vpn
+  '';
+
+  config = mkIf cfg.enable {
+    environment.systemPackages = [pkgs.openconnect];
+  };
+}