diff --git a/flake.lock b/flake.lock
index 53c87a2..ffb5e8c 100644
--- a/flake.lock
+++ b/flake.lock
@@ -558,6 +558,21 @@
         "type": "github"
       }
     },
+    "nordvpn": {
+      "locked": {
+        "lastModified": 1778706114,
+        "narHash": "sha256-imvR+4kuwwGDepNrCeEldhiK8dsdzq7Bnebq4hwb2Jk=",
+        "owner": "morettimarco",
+        "repo": "nordvpn-nixos",
+        "rev": "0ecacc38e51147ab60082a692c8334cbbfae3ef5",
+        "type": "github"
+      },
+      "original": {
+        "owner": "morettimarco",
+        "repo": "nordvpn-nixos",
+        "type": "github"
+      }
+    },
     "pre-commit-hooks": {
       "inputs": {
         "flake-compat": "flake-compat",
@@ -591,6 +606,7 @@
         "nixos-hardware": "nixos-hardware",
         "nixpkgs": "nixpkgs_2",
         "nixvim": "nixvim",
+        "nordvpn": "nordvpn",
         "sops-nix": "sops-nix",
         "tranquil-pds": "tranquil-pds",
         "zen-browser": "zen-browser"
diff --git a/flake.nix b/flake.nix
index 813ef6b..9c5219a 100644
--- a/flake.nix
+++ b/flake.nix
@@ -25,6 +25,7 @@
       url = "github:nix-community/nixvim";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+    nordvpn.url = "github:morettimarco/nordvpn-nixos";
     sops-nix = {
       url = "github:Mic92/sops-nix";
       inputs.nixpkgs.follows = "nixpkgs";
diff --git a/modules/users/igneous.nix b/modules/users/igneous.nix
index 5f6adef..1082f1e 100644
--- a/modules/users/igneous.nix
+++ b/modules/users/igneous.nix
@@ -27,6 +27,7 @@
       sops
       spotify
       steam
+      vpn
       zen
       zoom
     ];
diff --git a/modules/vpn.nix b/modules/vpn.nix
new file mode 100644
index 0000000..1485e1c
--- /dev/null
+++ b/modules/vpn.nix
@@ -0,0 +1,9 @@
+{
+  den.aspects.vpn = { user, ... }: {
+    nixos = { pkgs, ... }: {
+      services.nordvpn.enable = true;
+      environment.systemPackages = with pkgs; [ nordvpn ];
+      users.users.${user.name}.extraGroups = [ "nordvpn" ];
+    };
+  };
+}