{
  config,
  lib,
  pkgs,
  ...
}:
{
  networking.networkmanager.enable = true;
  systemd.services = {
    NetworkManager-wait-online.enable = false;
  };
  environment.systemPackages = lib.optionals (config.bchmnn.collections.vpn.enable) [
    pkgs.openvpn3
    pkgs.mullvad-vpn
    pkgs.wireguard-tools # tools for the wireguard secure network tunnel
  ];
  services.mullvad-vpn.enable = config.bchmnn.collections.vpn.enable;
  services.tailscale.enable = config.bchmnn.collections.vpn.enable;
}