diff --git a/modules/nixos/profiles/vpn.nix b/modules/nixos/profiles/vpn.nix
new file mode 100644
index 00000000..7151eaf2
--- /dev/null
+++ b/modules/nixos/profiles/vpn.nix
@@ -0,0 +1,20 @@
+{ config, options, lib, pkgs, ... }:
+
+let
+  cfg = config.profiles.vpn;
+in
+{
+  options.profiles.vpn = {
+    personal.enable = lib.mkEnableOption "personal VPN configuration with Wireguard";
+  };
+
+  config = lib.mkMerge [
+    (lib.mkIf cfg.personal.enable {
+      services.tailscale.enable = true;
+      networking = {
+        nameservers = [ "100.100.100.100" "8.8.8.8" "1.1.1.1" ];
+        search = [ "barbel-bee.ts.net" ];
+      };
+    })
+  ];
+}