add appgate with overlay and wrapper

provision/hosts/osprey/configuration.nix

@@ -25,7 +25,6 @@
     docker-compose
     podman-tui
     dive
-    appgate-sdp
   ];
 
   # Modules 
@@ -37,6 +36,7 @@
     programs = {
       chezmoi.apply = true;
       kitty.enable = true;
+      appgate-sdp.enable = true;
     };
     services = {
       peripherals.enable = true;

provision/modules/programs/appgate-sdp.nix

@@ -0,0 +1,36 @@
+{ config, lib, pkgs, user, ... }:
+
+let cfg = config.modules.programs.appgate-sdp;
+in {
+  options.modules.programs.appgate-sdp.enable = lib.mkEnableOption "appgate-sdp";
+  config = lib.mkIf cfg.enable {
+    environment.systemPackages = with pkgs; [
+      appgate-sdp
+      (pkgs.writeScriptBin "appgate-sdp-wrapped" ''
+        #!/bin/sh
+        appgate
+        sudo systemctl restart resolvconf.service
+      '')
+    ];
+    home-manager.users.${user} = {
+      # Custom entry that uses wrapped binary
+      xdg.desktopEntries.appgate = {
+        name="Appgate SDP";
+        exec="pkexec appgate-sdp-wrapped";
+        icon="appgate-icon";
+        terminal = false;
+        type = "Application";
+        mimeType= ["x-scheme-handler/appgate"];
+        categories= ["Network"];
+      };
+    };
+
+    boot.kernelModules = [ "tun" ];
+    services.dbus.packages = [ pkgs.appgate-sdp ];
+    systemd = {
+      packages = [ pkgs.appgate-sdp ];
+      # https://github.com/NixOS/nixpkgs/issues/81138
+      services.appgatedriver.wantedBy =  [ "multi-user.target" ];
+    };
+  };
+}

provision/modules/programs/default.nix

@@ -1,6 +1,7 @@
 { ... }:
 {
   imports = [
+    ./appgate-sdp.nix
     ./beancount.nix
     ./chrome
     ./firefox