{
  services.globalprotect.enable = true;
}