diff --git a/nixos/dustbowl.nix b/nixos/dustbowl.nix
index a1eff6e..db388b6 100644
--- a/nixos/dustbowl.nix
+++ b/nixos/dustbowl.nix
@@ -87,6 +87,8 @@
   networking.wireguard.enable = true;
   networking.firewall.checkReversePath = "loose";
 
+  services.mullvad-vpn.enable = true;
+
   # The global useDHCP flag is deprecated, therefore explicitly set to false here.
   # Per-interface useDHCP will be mandatory in the future, so this generated config
   # replicates the default behaviour.
@@ -165,6 +167,7 @@
     fzf
     tig
     croc
+    mullvad
 
     # GTK theme
     gnome.adwaita-icon-theme