From 3d17d6fff637cfadd6adb10adaf58bd8451fb90e Mon Sep 17 00:00:00 2001
From: gbtb <goodbetterthebeast3@gmail.com>
Date: Sat, 3 Dec 2022 20:24:19 +1000
Subject: [PATCH] nixos/openvpn: added restartAfterSleep option Additional
 systemd unit that hooks to sleep.target and kills openvpn processes

---
 nixos/modules/services/networking/openvpn.nix | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/nixos/modules/services/networking/openvpn.nix b/nixos/modules/services/networking/openvpn.nix
index 492a0936fdbb..3a255b9172cc 100644
--- a/nixos/modules/services/networking/openvpn.nix
+++ b/nixos/modules/services/networking/openvpn.nix
@@ -70,6 +70,16 @@ let
       serviceConfig.Type = "notify";
     };
 
+  restartService = optionalAttrs cfg.restartAfterSleep {
+      openvpn-restart = {
+          wantedBy = [ "sleep.target" ];
+          path = [ pkgs.procps ];
+          script = "pkill --signal SIGHUP --exact openvpn";
+          #SIGHUP makes openvpn process to self-exit and then it got restarted by systemd because of Restart=always
+          description = "Sends a signal to OpenVPN process to trigger a restart after return from sleep";
+        };
+    };
+
 in
 
 {
@@ -201,6 +211,12 @@ in
 
     };
 
+  services.openvpn.restartAfterSleep = mkOption {
+    default = true;
+    type = types.bool;
+    description = lib.mdDoc "Whether OpenVPN clients should be restarted after sleep.";
+    };
+
   };
 
 
@@ -208,7 +224,8 @@ in
 
   config = mkIf (cfg.servers != {}) {
 
-    systemd.services = listToAttrs (mapAttrsFlatten (name: value: nameValuePair "openvpn-${name}" (makeOpenVPNJob value name)) cfg.servers);
+    systemd.services = (listToAttrs (mapAttrsFlatten (name: value: nameValuePair "openvpn-${name}" (makeOpenVPNJob value name)) cfg.servers))
+     // restartService;
 
     environment.systemPackages = [ openvpn ];