{
  iptables = ''
    # vpn with default interface name (tun/tap)
    iptables -A OUTPUT -d 192.0.2.15 -j ACCEPT

    # vpn with non-default interface name
    iptables -A OUTPUT -d 192.0.2.67 -j ACCEPT
    iptables -A OUTPUT -o cute-vpn -j ACCEPT
  '';

  vpn-config = "config /var/vpn/changeme.ovpn";
  vpn-username = "changeme";
  vpn-password = "changeme";

  # for redshift
  latitude = 42.42;
  longitude = 42.42;
}