nixos-config/system/security/openvpn.nix

{ config, pkgs, ... }:

{
  environment.systemPackages = [ pkgs.openvpn ];
  environment.etc.openvpn.source = "${pkgs.update-resolv-conf}/libexec/openvpn";
}