{ pkgs, lib, config, hostName, private, ... }:
let
  inherit (config.services) openvpn;
in
{
services.netns.namespaces."riseup" = {
};
services.openvpn.servers."riseup" = {
  netns = "riseup";
  settings = {
    verb = 3;
    auth-user-pass = "${private}/${hostName}/openvpn/riseup/auth-user-pass";
    ca = openvpn/riseup/RiseupCA.pem;
    client = true;
    dev = "ov-riseup";
    dev-type = "tun";
    persist-tun = true;
    nobind = true;
    persist-key = true;
    tls-client = true;
    remote-cert-tls = "server";
    remote = "198.252.153.226 1194 udp";
    reneg-sec = 0;
    script-security = 2;
    up-restart = true;
  };
};
}