{ me, config, ddnnss, ... }:

let
  domain = "rnrd.eu";
in
{
  imports = [ ddnnss.nixosModules.default ];

  age.secrets.bunny-dns = {
    file = ../secrets/bunny-dns.age;
  };

  services.ddnnss = {
    enable = true;
    interval = "30min";

    credentials = {
      bunny-dns = config.age.secrets.bunny-dns.path;
    };

    settings = {
      records = [
        {
          zone = domain;
          name = me.name;
          type = "AAAA";
          provider = "bunny";
          source = "icanhazip";
        }
      ];

      providers.bunny = {
        kind = "bunny";
        keyFile = "$CREDENTIALS_DIRECTORY/bunny-dns";
      };

      sources.icanhazip = {
        kind = "icanhazip";
      };
    };
  };
}