From 222168c0a7c670b133b4a2910301676830f1e27c Mon Sep 17 00:00:00 2001
From: Daniel Kempkens <daniel+git@kempkens.io>
Date: Wed, 12 Jun 2024 09:59:24 +0200
Subject: [PATCH] cfdyndns: init

---
 agenix/hosts/argon/cfdyndns/apiToken.age |   7 +++++++
 agenix/hosts/argon/config.nix            |   4 ++++
 secret/hosts/argon.nix                   | Bin 581 -> 848 bytes
 secrets.nix                              |   2 ++
 system/hosts/argon.nix                   |   1 +
 system/nixos/cfdyndns.nix                |   9 +++++++++
 6 files changed, 23 insertions(+)
 create mode 100644 agenix/hosts/argon/cfdyndns/apiToken.age
 create mode 100644 system/nixos/cfdyndns.nix

diff --git a/agenix/hosts/argon/cfdyndns/apiToken.age b/agenix/hosts/argon/cfdyndns/apiToken.age
new file mode 100644
index 0000000..946f157
--- /dev/null
+++ b/agenix/hosts/argon/cfdyndns/apiToken.age
@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 MtGp6g /DLwiLhRRDFSIal3aCmcedgK4K/5SIiiCw190YZwoUU
+etUNg5IVs3GnEUAy8CxKKaL317ZbdN9kUQ/H7zcpv5c
+-> ssh-ed25519 1fcLUQ LQAjiINwW1SeiDWbmjmlvaqLT7IDpY98Md607ExXfEI
+ByMQ5vF4A4BL8YtPUzLr4+0FBcyMaXYKNKleppMZ/4w
+--- h4IafmgjN7lxUBzJhadHNtfobrbiyOrprqEXbAZ/1jA
+p �r��8B��)�a����9�ٽ�m-�#�v�Xx�#F,<C��m]!�q�.%$��:�֢3&X�8G�
\ No newline at end of file
diff --git a/agenix/hosts/argon/config.nix b/agenix/hosts/argon/config.nix
index c8c73d3..2d28c68 100644
--- a/agenix/hosts/argon/config.nix
+++ b/agenix/hosts/argon/config.nix
@@ -10,6 +10,10 @@
       group = "acme";
     };
 
+    cfdyndns-api-token = {
+      file = ./cfdyndns/apiToken.age;
+    };
+
     tailscale-authkey = {
       file = ./tailscale/authkey.age;
     };
diff --git a/secret/hosts/argon.nix b/secret/hosts/argon.nix
index abeec166b936dde8d00fbf5ffbe30c59e13e289e..218f1ca0672e66213e15c857f416bb9f9a383d4c 100644
GIT binary patch
literal 848
zcmV-W1F!r5M@dveQdv+`0NA4GJQdJy`L3G^aXx<d1%6%$!WvK3-I<j`MnG*qGzRMl
zg%zo2o>4}HV*n*LD-d&txkKxY2O!%Zkdmc}2KbUZ@fwcHjd>OPrHDemlsCt)q+hrF
z%DUJYUa{5q$KM}>luMhY2x~-@ETA@;k^3ls=C#l)oK6bM=@h*?n7_rm<`$UgQ;a$n
zCS`F38N+O(-%yNB)V;eYua9eC^=9HfV4b6aZN3fb*QlL#)>yaXn?o9cgyB_fEfw*;
zH^43v3XcnHfBPJvG?qY-5k!NlS$>6=?JaUnxIP@EFoFdSm}ekH;H}x5c3Oz}^8v)U
z0iiGv-NB)ldjRk~Zt``ML#PbJ=i7^IbSrU2uO*E6lbfn*<!~vi;HY+}r>ejJHKzl_
z(C(wV=-bL^4WBFMqjjj-ZJjHUnJr{hao#?mJGBbeO1^O9#3EZ?9B_+N1v8EAF{mUU
zR909<lgXD;09}Q;l>RmEmnKJ;dRX^|+*j6di$Bnr>EkBbTX4$0?<jTYa;2*)h{s4x
z?<!ezsv{=k{|cb@gvg8$(phKt<y4m?uvV=b@uSeEAHtRvm#Ia;5S^E$gV{Fx66Vi?
zdSnPl*1KTrg97}9zb}F2NCo>qDPa1o(Pk`^XNIcpzkL7=0D^q5x8)iH9Z72&gBWdD
zQo?AmR1yDRoAW}bp8uHP<Qyi4gWcTj<<@I!1LMf2ni_|)TND7SRfjNxS;#;T5QAv6
zzeU!t7SY6pS{s9xvwtB|Q_5G`=fdL)2~Nmf@X-Z?5Aun22vY<N8pN0+J0r&mNynZ(
zF%|G_QZ(`<XH!vEPyA?Rm(GYpV&*mcQm%1ho(G7(S)<Et9mwj3)RVk9KAx4++8z(h
zNxRC6S{V!eu8EK%WSanGD}m84;D7>+%RaM8y~awl6nUmc6{+n^zMKwNF%m+8Vy$fq
z59VcF?p$JL%&G*{AtDkglOQ4LJR3pAfcjsq?SSPJKA1iGjcL8c@{l~OPO2`Q;)>aP
z#Ay*<8>VpUsia1K{ei<mH?hfOr*z7P=S#BjiR_{PW-JGFl@ip5PW=vnE(A!(Me{cH
aoS?&{PWB#URBzS0YZ!aDhYeoNq`4dmc%elA

literal 581
zcmV-L0=oSGM@dveQdv+`046)<gvN=KdH6Ro8<~~T;&JRfj)Xm|pg5Nd4Om;=!-X<d
z|609<vNRUaXa0gg5F&gw9eK{pTPgFDBMVNYm-eFlv!X$ODBrhHdN|V<`=I)5O^RfE
zd-ma|`%<rxHRrrPpxc=4*HWfzU`>qk5nj;tnh8b-^9Vn28%v8Ayuub<U9_&e-=uWu
zg(e&5sq8Yb#Oe2OsM$1GM6~>@XWP>~84h@5s{f<~yYobu@FgK{A5bKcg5(r5BVLiH
zXU0^W{VjSO)|#+JCq20sEBY<2;H_cX?%=Q=3eYB~)4WKQ!@HL2V?hCWQQOjhK0c0-
z$`-;^`BqeQl+p2OCXe}csKh=`6bF^EO_Bes?oo;-%2dw6=_E?+=VO_<G<H0fG4k#l
zSZ8UAV6VZ9%`g!FLM;&YO_9SnXDGS_)VVVjj&zqZ9U8UlGTZVrP<6U20wwxVfCn-y
zR)kZiH9v_PT%%rO>>F$LD8m1nKex)4rdIeP#nTMB2tyzZ!DTJr)ynl{Dmo~eSO_FD
zoDaLYmcC0SG;+D$;{`8R1m?NR6-ID@z0vn2-h>)_E&O)atesJP+*<pP(Xw<$MD>cw
znixcF%9MMo$HlE0i7^;CAI&i89en;09`XR{Z>K|0BJOC8=L94sT}8e<OeH}>7{Tlg
zhiPOF?L0q8_s3{`l^46VUC86!|6yu*e_fhJ4a0ra&=Ju?n)Z2HD-6TEV}~CMiTl9h
TX{dRD+0bmAw5cPS26pdGFD@SU

diff --git a/secrets.nix b/secrets.nix
index 3c72aa6..277ef82 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -92,6 +92,8 @@ in
 
   "agenix/hosts/argon/acme/credentials.age".publicKeys = argon;
 
+  "agenix/hosts/argon/cfdyndns/apiToken.age".publicKeys = argon;
+
   "agenix/hosts/argon/forgejo-actions/token.age".publicKeys = argon;
 
   "agenix/hosts/argon/tailscale/authkey.age".publicKeys = argon;
diff --git a/system/hosts/argon.nix b/system/hosts/argon.nix
index 7f1d379..5a22b62 100644
--- a/system/hosts/argon.nix
+++ b/system/hosts/argon.nix
@@ -20,6 +20,7 @@ in
     ../nixos/nginx-argon.nix
 
     (import ../nixos/adguardhome.nix (args // { inherit secret; }))
+    (import ../nixos/cfdyndns.nix (args // { inherit secret; }))
 
     ../nixos/attic.nix
 
diff --git a/system/nixos/cfdyndns.nix b/system/nixos/cfdyndns.nix
new file mode 100644
index 0000000..76c18d1
--- /dev/null
+++ b/system/nixos/cfdyndns.nix
@@ -0,0 +1,9 @@
+{ config, secret, ... }:
+
+{
+  services.cfdyndns = {
+    enable = true;
+    inherit (secret.cfdyndns) email records;
+    apiTokenFile = config.age.secrets.cfdyndns-api-token.path;
+  };
+}