diff --git a/pkgs/additional/sane-scripts/default.nix b/pkgs/additional/sane-scripts/default.nix
index 2ca84695..e2193790 100644
--- a/pkgs/additional/sane-scripts/default.nix
+++ b/pkgs/additional/sane-scripts/default.nix
@@ -286,6 +286,11 @@ let
       src = ./src;
       pkgs = [ "coreutils-full" "gnugrep" "gnused" "sane-scripts.ip-check" "systemd" ];
     };
+    vpn-up = static-nix-shell.mkBash {
+      pname = "sane-vpn-up";
+      src = ./src;
+      pkgs = [ "coreutils-full" "gnugrep" "gnused" "sane-scripts.ip-check" "systemd" ];
+    };
   };
 in
 symlinkJoin {
diff --git a/pkgs/additional/sane-scripts/src/sane-vpn-up b/pkgs/additional/sane-scripts/src/sane-vpn-up
index 36cd973b..f74d3c69 100755
--- a/pkgs/additional/sane-scripts/src/sane-vpn-up
+++ b/pkgs/additional/sane-scripts/src/sane-vpn-up
@@ -1,4 +1,5 @@
-#!/usr/bin/env bash
+#!/usr/bin/env nix-shell
+#!nix-shell -i bash -p coreutils-full -p gnugrep -p gnused -p sane-scripts.ip-check -p systemd
 
 # first arg should be the region, e.g. `us` or `ukr`