refactor

modules/capabilities/networking.nix

@@ -8,13 +8,12 @@ in
   };
 
   flake.modules.nixos.network-manager = {
-    networking = {
-      networkmanager.enable = true;
-      firewall.allowedTCPPorts = [
-        5173
-        5174
-      ];
-    };
+    networking.networkmanager.enable = true;
+  };
+
+  flake.modules.nixos.openvpn = {
+    programs.openvpn3.enable = true;
+    services.resolved.enable = true;
   };
 
   flake.modules.nixos.server-firewall =