{ config, lib, ... }: {
	# Password file for mail application password
	sops.secrets.ddns-updater-config.sopsFile = ./resources/secrets/ddns-updater-config.yaml;

	# Enable ddns updater
	services.ddns-updater = {
		enable = true;
		environment = {
			SERVER_ENABLED="no";
			CONFIG_FILEPATH = config.sops.secrets.ddns-updater-config.path;
			PERIOD = "5m";
		};
	};

	# FIXME Required root permissions to open secret
	systemd.services.ddns-updater = {
		serviceConfig.DynamicUser = lib.mkForce false;
	};
}