nixos/services/mullvad.nix

{
  config,
  lib,
  ...
}:
with lib;
  mkIf (elem "mullvad" config.machine.services) {
    services.mullvad-vpn.enable = true;
  }