blob: 103c23b405a7f7c7f2d20a60f93da3e2d169eacf (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
{ config, lib, ... }: {
# Password file for mail application password
sops.secrets.ddns-updater-config.sopsFile = ./resources/secrets/ddns-updater-config.yaml;
# Enable ddns updater
services.ddns-updater = {
enable = true;
environment = {
SERVER_ENABLED="no";
CONFIG_FILEPATH = config.sops.secrets.ddns-updater-config.path;
PERIOD = "5m";
};
};
# FIXME Required root permissions to open secret
systemd.services.ddns-updater = {
serviceConfig.DynamicUser = lib.mkForce false;
};
}
|
