feat(services): added duckdns service

updates ip every few minutes

Author: suasuasuasuasua

configurations/nixos/lab/services/services.nix

@@ -28,6 +28,10 @@ in
         inherit hostName domain;
       };
     };
+    duckdns = {
+      enable = true;
+      domains = [ "vpn-sua" ];
+    };
     gitweb = {
       enable = true;
       projectroot = "/zshare/srv/git";

configurations/nixos/lab/sops.nix

@@ -19,6 +19,7 @@
     };
 
     # This is the actual specification of the secrets.
+    secrets."duckdns/token" = { };
     secrets."acme/namecheap_api" = { };
   };
 }

modules/nixos/services/duckdns.nix

@@ -0,0 +1,29 @@
+{
+  config,
+  lib,
+  ...
+}:
+let
+  serviceName = "duckdns";
+
+  cfg = config.nixos.services.${serviceName};
+in
+{
+  options.nixos.services.${serviceName} = {
+    enable = lib.mkEnableOption ''
+      Free dynamic dns
+    '';
+    domains = lib.mkOption {
+      type = with lib.types; nullOr (listOf str);
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    services.duckdns = {
+      inherit (cfg) domains;
+
+      enable = true;
+      tokenFile = config.sops.secrets."duckdns/token".path;
+    };
+  };
+}

secrets/secrets.yaml

@@ -2,6 +2,8 @@
 #ENC[AES256_GCM,data:NdBMn3Ph1g==,iv:YFJKr0M8dIbsWYO/zvk0oXE537bz3pN4GL0tF6tNnes=,tag:YvhabTs7Cu5lkuNCBperUQ==,type:comment]
 #ENC[AES256_GCM,data:u++VXxZKR61TJnVwfeN7cjAQuhPSTILnWupUEqj7vz5xPTg3ZtFdZHI=,iv:vx7ZiVyDMWkpDJ1oWIT2TVETPRF+wGq6Kt19rgUMuh0=,tag:GELwcfBxtJeq8i1pO77r2Q==,type:comment]
 #ENC[AES256_GCM,data:5NyDog==,iv:iYTi4X38ASQhxtcv6qLJu1JC8+baMYNhEOC77JYMne8=,tag:nlASUQAMMvnqPVF6uXXGhw==,type:comment]
+duckdns:
+    token: ENC[AES256_GCM,data:rPYYV8/SL32LbLvQmI7rwlkzrBKvBDUukg7XIHpRG1y0MsrL,iv:ipknOkw5581PJlAd2tSF2H5dIeWBSjhzuKyiZyaBpB0=,tag:TbcUa8oLMZK+1qg3btYQfA==,type:str]
 acme:
     namecheap_api: ENC[AES256_GCM,data:qkIxattZ2hB/kwFN5jld20DfKCrIuCy07k7u1Q5PWHvI7U81XDd1+oDKJeY6o64ETc6JIp96Lbi+IjI0JWjGL8LZdhlo/n/RLycPi2SL5YrhreBDa3itPQ==,iv:hOpqPXty7+mxv+sOqk8fb3SgDjR0+T9Q4gpuUsRPFYs=,tag:ICiIT4hMbC7Mn2AeLqfo0Q==,type:str]
 sops:
@@ -24,7 +26,7 @@ sops:
             cmpNZEtJcDlmMHN3eW5iL0FQMktlbG8KVdFj8hAGIJaZgLnO2W0rvNNQyqERMH9p
             4hhuaIXeF0TzgqbPvPRkv+qSq4TXhv3AY88Jpyx1TIL6HmuQ9Ut2Sw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-06T01:45:19Z"
-    mac: ENC[AES256_GCM,data:7C82w20jcUyBRyvu4UbLXLHIY94Ya5b4Hk0douW+IaxR7jjFofBtQbrAgry6gIFYLGyLrXbUfL1AZO3yndNBFNH0anQ8Y+777dc5W1x5vvxc39ne6pnU4RBHbmFgqmx9XnMsA+sSZDk3LyURuZpUixP+Pq4+8KSqodeIk7O+p18=,iv:/FIYMzWV94QqgWxcXXh4kmdMk3zmSxmJmv/l89zmuMo=,tag:TE+ikBMNQbyvYgbmgtXTgw==,type:str]
+    lastmodified: "2025-06-06T04:51:17Z"
+    mac: ENC[AES256_GCM,data:us95Fg4cx6p4Lqw7HhrCIBzuHOHodlMsKjkZpEj5ZFesagnjC/IV81xFHW1WLhQ+q9gA5cITZQn+eTk0Y8UjS4Lf/rx3n8Q6rdHUDFloOwGHJGrtr/4626fXbLAtUpF79x9ss9ASkF7Z/uFSiDDRbdvswLUKGiBmf4ikiDBz7PQ=,iv:W7SAGQ9t3vTq2Ys1B0zSF5tnCvbNAkSsQ2fQvT1EM9E=,tag:i2kiNRoumZzfBy7SYjPh3Q==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.10.2