{ ... }:
{
  services.globalprotect.enable = true;
}