feat(tyr): move away from duckdns.

modules/servers/tyr/dns.nix

@@ -79,15 +79,29 @@
           ''"syncthing.home.cronyakatsuki.xyz IN A 192.168.0.5"''
           ''"wallos.home.cronyakatsuki.xyz IN A 192.168.0.5"''
           ''"assistant.home.cronyakatsuki.xyz IN A 192.168.0.5"''
+          ''"ddns.home.cronyakatsuki.xyz IN A 192.168.0.5"''
         ];
       };
     };
   };
 
-  # Setup duck dns for dynamic dns
-  services.duckdns = {
-    enable = true;
-    domains = ["cronyakatsuki"];
-    tokenFile = "${config.age.secrets.duckdns.path}";
+  # Setup ddns-updater
+  services.ddns-updater.enable = true;
+
+  services.traefik.dynamicConfigOptions.http = {
+    services.ddns.loadBalancer.servers = [
+      {
+        url = "http://localhost:8000";
+      }
+    ];
+
+    routers.ddns = {
+      rule = "Host(`ddns.home.cronyakatsuki.xyz`)";
+      tls = {
+        certResolver = "porkbun";
+      };
+      service = "ddns";
+      entrypoints = "websecure";
+    };
   };
 }

modules/servers/tyr/secrets.nix

@@ -26,6 +26,13 @@
         file = ../../../secrets/traefik.age;
         owner = "traefik";
       };
+      ddns = {
+        file = ../../../secrets/ddns.age;
+        path = "/var/lib/ddns-updater/config.json";
+        owner = "nobody";
+        group = "nogroup";
+        symlink = false;
+      };
     };
   };
 }

secrets/secrets.nix

@@ -43,4 +43,5 @@ in {
   "wg-tyr.age".publicKeys = systems ++ users;
   "duckdns.age".publicKeys = systems ++ users;
   "glance.age".publicKeys = systems ++ users;
+  "ddns.age".publicKeys = systems ++ users;
 }