From 4610f75d064f8ffc8bfe2c72a1f1ed33a11b7872 Mon Sep 17 00:00:00 2001
From: kB01 <kb01@kb-one.de>
Date: Thu, 1 Aug 2024 11:38:03 +0200
Subject: [PATCH] Modified GlobalProtect VPN Setting

---
 systems/x86_64-linux/yerukall/default.nix | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/systems/x86_64-linux/yerukall/default.nix b/systems/x86_64-linux/yerukall/default.nix
index 43a6ed6..209e64b 100644
--- a/systems/x86_64-linux/yerukall/default.nix
+++ b/systems/x86_64-linux/yerukall/default.nix
@@ -330,10 +330,14 @@ in {
   # Enable the OpenSSH daemon.
   # services.openssh.enable = true;
 
-  services.globalprotect.settings = {
-    "vpn.ohmportal.de" = {
-      openconnect-args = "--protocol gp --disable-ipv6";
+  services.globalprotect = {
+    enable = true;
+    settings = {
+      "vpn.ohmportal.de" = {
+        openconnect-args = "--protocol gp --disable-ipv6 --mtu=1284 --force-dpd=30 ";
+      };
     };
+    csdWrapper = "${pkgs.openconnect}/libexec/openconnect/hipreport.sh";
   };
 
   # Open ports in the firewall.