mirror of
https://github.com/nmasur/dotfiles
synced 2025-05-10 06:35:51 +00:00
61 lines
2.0 KiB
Nix
61 lines
2.0 KiB
Nix
{
|
|
config,
|
|
pkgs,
|
|
lib,
|
|
...
|
|
}:
|
|
|
|
let
|
|
cfg = config.services.cloudflare-dyndns-noproxy;
|
|
in
|
|
|
|
{
|
|
|
|
options.services.cloudflare-dyndns-noproxy.enable = lib.mkEnableOption "Cloudflare dyndns client without proxying";
|
|
|
|
config = lib.mkIf cfg.enable {
|
|
|
|
# Run a second copy of dyn-dns for non-proxied domains
|
|
# Adapted from: https://github.com/NixOS/nixpkgs/blob/nixos-unstable/nixos/modules/services/networking/cloudflare-dyndns.nix
|
|
systemd.services.cloudflare-dyndns-noproxy =
|
|
lib.mkIf ((builtins.length config.nmasur.presets.services.cloudflare.noProxyDomains) > 0)
|
|
{
|
|
description = "CloudFlare Dynamic DNS Client (no proxy)";
|
|
after = [
|
|
"network.target"
|
|
"cloudflare-api-secret.service"
|
|
];
|
|
requires = [ "cloudflare-api-secret.service" ];
|
|
wantedBy = [ "multi-user.target" ];
|
|
startAt = "*:0/5";
|
|
|
|
environment = {
|
|
CLOUDFLARE_DOMAINS = toString config.nmasur.presets.services.cloudflare.noProxyDomains;
|
|
};
|
|
|
|
serviceConfig = {
|
|
Type = "simple";
|
|
DynamicUser = true;
|
|
StateDirectory = "cloudflare-dyndns-noproxy";
|
|
Environment = [ "XDG_CACHE_HOME=%S/cloudflare-dyndns-noproxy/.cache" ];
|
|
LoadCredential = [
|
|
"apiToken:${config.services.cloudflare-dyndns.apiTokenFile}"
|
|
];
|
|
};
|
|
|
|
script =
|
|
let
|
|
args =
|
|
[ "--cache-file /var/lib/cloudflare-dyndns-noproxy/ip.cache" ]
|
|
++ (if config.services.cloudflare-dyndns.ipv4 then [ "-4" ] else [ "-no-4" ])
|
|
++ (if config.services.cloudflare-dyndns.ipv6 then [ "-6" ] else [ "-no-6" ])
|
|
++ lib.optional config.services.cloudflare-dyndns.deleteMissing "--delete-missing";
|
|
in
|
|
''
|
|
export CLOUDFLARE_API_TOKEN=$(cat ''${CREDENTIALS_DIRECTORY}/apiToken)
|
|
exec ${lib.getExe pkgs.cloudflare-dyndns} ${toString args}
|
|
'';
|
|
};
|
|
};
|
|
}
|