{ me, config, ... }:

let
  domain = "rnrd.eu";
in
{
  age.secrets.cloudflare-dns = {
    file = ../secrets/cloudflare-dns.age;
  };

  services.ddclient = {
    enable = true;

    # Cloudflare DNS API parameters

    # dyn.com no longer supports HTTPS :(
    # See: https://github.com/ddclient/ddclient/issues/597
    # TODO: Update to new usev6 option in 24.11
    extraConfig = ''
      usev6=webv6, webv6=ipv6.icanhazip.com/
    '';
    protocol = "cloudflare";

    username = "token";
    zone = domain;
    domains = [ "${me.name}.${domain}" ];
    passwordFile = config.age.secrets.cloudflare-dns.path;
  };
}