feat: remove tailscale, setup ddclient for namecheap

hosts/APPA/network.nix

@@ -1,6 +1,6 @@
+{ ... }:
 {
   networking = {
-    firewall.enable = true;
     hostName = "APPA";
     useDHCP = false;
     interfaces.enp0s25 = {
@@ -20,6 +20,7 @@
     };
     defaultGateway = {
       address = "192.168.2.1";
+      interface = "enp0s25";
     };
     defaultGateway6 = {
       address = "fdd2:59e7:4ee1:0001::1";

hosts/APPA/services/adguard-home.nix

@@ -22,6 +22,10 @@
             domain = "dryb.org";
             answer = "192.168.2.40";
           }
+          {
+            domain = "speedport.ip";
+            answer = "192.168.2.1";
+          }
           {
             domain = "speedport.dryb.org";
             answer = "192.168.2.1";

hosts/APPA/services/ddclient.nix

@@ -0,0 +1,17 @@
+{ config, ... }:
+{
+  age.secrets.passwords-ddclient-namecheap = {
+    file = ../../../secrets/passwords/ddclient/namecheap.age;
+  };
+
+  services.ddclient = {
+    enable = true;
+    use = "web, web=ifconfig.me/";
+    protocol = "namecheap";
+    server = "dynamicdns.park-your-domain.com";
+    username = "dryb.org";
+    passwordFile = config.age.secrets.passwords-ddclient-namecheap.path;
+    domains = [ "vpn" ];
+    interval = "10min";
+  };
+}

hosts/APPA/services/default.nix

@@ -2,6 +2,7 @@
   imports = [
     ./adguard-home.nix
     ./anki.nix
+    ./ddclient.nix
     ./gitea.nix
     ./homepage-dashboard.nix
     ./nginx.nix

modules/core/network.nix

@@ -5,7 +5,9 @@
   ...
 }:
 {
-  networking.networkmanager.enable = true;
+  networking = {
+    networkmanager.enable = true;
+  };
   systemd.services = {
     NetworkManager-wait-online.enable = false;
   };
@@ -15,5 +17,4 @@
     pkgs.wireguard-tools # tools for the wireguard secure network tunnel
   ];
   services.mullvad-vpn.enable = config.bchmnn.collections.vpn.enable;
-  services.tailscale.enable = config.bchmnn.collections.vpn.enable;
 }

modules/home-manager/gui/waybar.nix

@@ -133,7 +133,6 @@ in
           "modules-right": [
             "tray",
             "network",
-            "custom/tailscale",
             "custom/separator",
             "pulseaudio",
             "custom/separator",

secrets/passwords/ddclient/namecheap.age

@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 OFTJeQ /4VkgBRfkeDWGyydiC0UWnRldkkweIS3kQWiyazW30w
+FogoQsMtbjc0gUTGeMdoFTV0CZPv051x3qhRxYvGp+Q
+-> ssh-ed25519 lfMVeg tYYo7I8FawLwBrdTWtjDV/4hzhrUFlGZTAM5Hp8mtRE
+JEcLpEKgppWVrlUEvL+arvWBL7/6sVhW/ErXZRkzfIA
+-> ssh-ed25519 ueRyzQ wTI3u3XtBoTKargoSn+HWl9HQTZzXjCEnLGQRSCmVUE
++9ovukCRRZ3FO+uuPjdWWvUQBfTyW2NfDpEFkaTVBZE
+--- VpOsD2Mzrb/jWQVu9wLlTSiUZNbpBmD9ISDLtbivuO0
+b<Ý+YŸûh–<68>•('3[“KN3:ˆ]Ö¦Uklÿ9¯êGà]”ÐR•ÂÃö,çêt}4)œ
%Ñî=«Í#¾

secrets/secrets.nix

@@ -21,4 +21,5 @@ in
 {
   "passwords/gitea/db.age".publicKeys = users ++ [ APPA ];
   "passwords/anki/admin.age".publicKeys = users ++ [ APPA ];
+  "passwords/ddclient/namecheap.age".publicKeys = users ++ [ APPA ];
 }