colin
43fa7fdd9f
- shorter. - congruent with `nixos-rebuild .` choosing what to build based on `hostname`. - more widely used within other nix repos i've seen. - more accurate in the case that i migrate a host to a different machine (which i plan to do with servo).
33 lines
1.0 KiB
Nix
33 lines
1.0 KiB
Nix
{ config, pkgs, ... }:
|
|
|
|
{
|
|
systemd.services.ddns-he = {
|
|
description = "update dynamic DNS entries for HurricaneElectric";
|
|
serviceConfig = {
|
|
EnvironmentFile = config.sops.secrets.ddns_he.path;
|
|
# TODO: ProtectSystem = "strict";
|
|
# TODO: ProtectHome = "full";
|
|
# TODO: PrivateTmp = true;
|
|
};
|
|
# HE DDNS API is documented: https://dns.he.net/docs.html
|
|
script = let
|
|
crl = "${pkgs.curl}/bin/curl -4";
|
|
in ''
|
|
${crl} "https://he.uninsane.org:$HE_PASSPHRASE@dyn.dns.he.net/nic/update?hostname=he.uninsane.org"
|
|
${crl} "https://native.uninsane.org:$HE_PASSPHRASE@dyn.dns.he.net/nic/update?hostname=native.uninsane.org"
|
|
${crl} "https://uninsane.org:$HE_PASSPHRASE@dyn.dns.he.net/nic/update?hostname=uninsane.org"
|
|
'';
|
|
};
|
|
systemd.timers.ddns-he = {
|
|
wantedBy = [ "multi-user.target" ];
|
|
timerConfig = {
|
|
OnStartupSec = "2min";
|
|
OnUnitActiveSec = "10min";
|
|
};
|
|
};
|
|
|
|
sops.secrets."ddns_he" = {
|
|
sopsFile = ../../../secrets/servo.yaml;
|
|
};
|
|
}
|