ddns

hosts/hermes/ddns.nix

@@ -0,0 +1,13 @@
+{config, ...}: {
+  services.cloudflare-dyndns = {
+    enable = true;
+    ipv4 = true;
+    ipv6 = false;
+    proxied = false;
+    deleteMissing = false;
+    domains = [];
+    apiTokenFile = config.age.secrets.cloudflare-api.path;
+  };
+  # services.cloudflare-dyndns.domains = [];
+  age.secrets."cloudflare-api".file = ../../secrets/cloudflare-api.age;
+}

hosts/hermes/default.nix

@@ -2,6 +2,7 @@
   imports = [
     ./hardware-configuration.nix
     ./configuration.nix
+    ./ddns.nix
     ./quassel.nix
     ./fail2ban.nix
     ./containers.nix

hosts/hermes/forgejo.nix

@@ -6,6 +6,7 @@
   domain = "git.cleslie.uk";
 in {
   services = {
+    cloudflare-dyndns.domains = [domain];
     forgejo = {
       enable = true;
       database.type = "postgres";

hosts/hermes/headscale.nix

@@ -13,6 +13,7 @@ in {
         ip_prefixes = "100.64.0.0/10";
       };
     };
+    cloudflare-dyndns.domains = [domain];
     caddy.virtualHosts.${domain}.extraConfig = ''
       reverse_proxy localhost:${toString config.services.headscale.port}
     '';

hosts/hermes/media.nix

@@ -85,6 +85,8 @@ in {
       };
     };
 
+    cloudflare-dyndns.domains = ["media.cleslie.uk" "watch.cleslie.uk" "request.cleslie.uk"];
+
     jellyfin = {
       enable = true;
       package = pkgs.jellyfin;

secrets/cloudflare-api.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 /RyXeg p2ROUhWiDQDOjALQnhhf566js8ivYTsgwNfCaaoe6yQ
+UnCc2/4lb+PxnrKdAPVqwAyXavFGr8M3NV3+fSSdAU0
+-> ssh-ed25519 aSaoJQ hHqpvUCaH5RLAQwTdH1llfF/0aTraXtl25qFDaFhUwk
++4VMHc3PGR9HBlVTw4anbYORQPgFl24WGF5pwmt7w20
+--- qa7ctM764SNg3u/ITk+6DRXbLqF1Lom1xgKysY9DrkE
+ô›Zš¾;Qš
+7î‡kÔ4%ú½#<08>ŸÞåpqÃÅâvìyú]
ièeǺð]
É©i¾Ó!4Ø=ÇsŒä‰<C3A4>JfÉpúH«sæò29½¥œs¯åF}µ‘˪—#ói8ù

secrets/secrets.nix

@@ -10,4 +10,5 @@ in {
   "mesh-conf-infra.age".publicKeys = keys.c ++ allSystems;
   "mesh-conf-cleslie.age".publicKeys = keys.c ++ allSystems;
   "forgejo-password.age".publicKeys = keys.c ++ [systems.hermes];
+  "cloudflare-api.age".publicKeys = keys.c ++ [systems.hermes];
 }