{ pkgs, lib, config, ... }:
let
  openconnect-epfl = pkgs.writeShellApplication {
    name = "openconnect-epfl";
    runtimeInputs = with pkgs; [ openconnect rbw ];
    text = ''
      METHOD="Microsoft Entra ID"
      RBW_ENTRY="EPFL Microsoft Auth"
      GASPAR_PASSWORD=$(rbw get "$RBW_ENTRY")
      GASPAR_TOKEN=$(rbw code "$RBW_ENTRY")

      printf "\n%s\n%s\n%s\n" "$METHOD" "$GASPAR_PASSWORD" "$GASPAR_TOKEN" | command sudo openconnect \
          --passwd-on-stdin \
          -u "pham" \
          --useragent='AnyConnect' \
          "https://vpn.epfl.ch"
    '';
  };
in
{
  home.packages = [ openconnect-epfl ];
}