Add DDNS to ahmed

3 files changed, 27 insertions, 0 deletions

diff --git a/.gitignore b/.gitignore
index adbc2b5..8c60df4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,6 @@
 # Generated symlink
 result
 */result
+
+# Secret files
+*.env
diff --git a/hosts/ahmed/cloudflare-ddns/default.nix b/hosts/ahmed/cloudflare-ddns/default.nix
new file mode 100644
index 0000000..77c799c
--- /dev/null
+++ b/hosts/ahmed/cloudflare-ddns/default.nix
@@ -0,0 +1,23 @@
+# This module sets up cloudflare-dyndns for <linus.onl>.
+
+{ lib, ... }:
+
+let
+
+in
+{
+  my.secrets.cloudflare-ddns = {
+    source = ./secrets.env;
+    dest = "/run/keys/cloudflare-ddns.env";
+  };
+
+  services.cloudflare-dyndns = {
+    enable = true;
+    apiTokenFile =  "/run/keys/cloudflare-ddns.env";
+    proxied = true;
+    domains = [ "linus.onl" ];
+  };
+
+  # Override the systemd service generated by `services.cloudflare-dyndns` to wait for key to be decrypted.
+  systemd.services.cloudflare-dyndns.after = [ "cloudflare-ddns-key.service" ];
+}
diff --git a/hosts/ahmed/configuration.nix b/hosts/ahmed/configuration.nix
index 2e6a9a7..f0ed279 100644
--- a/hosts/ahmed/configuration.nix
+++ b/hosts/ahmed/configuration.nix
@@ -9,6 +9,7 @@
       ./hardware-configuration.nix
       ./ssh.nix
       ./disable-screen.nix
+      ./cloudflare-ddns
     ];
 
   # Create the main user.