{ config, ... }:
{
  age.secrets.passwords-ddclient-cloudflare = {
    file = ../../../secrets/passwords/ddclient/cloudflare.age;
  };

  services.ddclient = {
    enable = true;
    use = "web, web=ifconfig.me";
    extraConfig = ''
      usev4=webv4, webv4=ifconfig.me
      usev6=disabled
    '';
    protocol = "cloudflare";
    zone = "dryb.org";
    passwordFile = config.age.secrets.passwords-ddclient-cloudflare.path;
    domains = [ "vpn.dryb.org" ];
    interval = "10min";
  };
}