nixos/homeConfig/modules/security/default.nix

{ pkgs, lib, config, ... }:

with lib;
let 
  cfg = config.modules.security;

in 
{ options.modules.security = { enable = mkEnableOption "security"; };
  config = mkIf cfg.enable {
    home.packages = with pkgs; [
      pass wireguard-tools ipscan  
    ]; 
  };
}