From 1b6330bfdfb1523d696ae8eae7eb78c8d080d0ed Mon Sep 17 00:00:00 2001
From: jalr <mail@jalr.de>
Date: Sat, 18 Dec 2021 20:24:11 +0000
Subject: [PATCH] Add dyndns client

---
 machines/raven/secrets.yaml         | 72 +++++++++++++++++++++++++++++
 machines/raven/services/default.nix |  1 +
 machines/raven/services/dyndns.nix  | 17 +++++++
 3 files changed, 90 insertions(+)
 create mode 100644 machines/raven/secrets.yaml
 create mode 100644 machines/raven/services/dyndns.nix

diff --git a/machines/raven/secrets.yaml b/machines/raven/secrets.yaml
new file mode 100644
index 0000000..7fef540
--- /dev/null
+++ b/machines/raven/secrets.yaml
@@ -0,0 +1,72 @@
+dyndns-password: ENC[AES256_GCM,data:FXAuhhVqs1cD8r1SKaY2pbAdzDU=,iv:t1wj201txdfPXRVBrX8bZbemEDNY9JoCQzKnw/VhW1I=,tag:E1XgN73DME1qKZD7qzkxCg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2021-12-18T19:53:04Z"
+    mac: ENC[AES256_GCM,data:y7gMYWpapU/dPEZmzQucmV7P+OdAsQmxrVdTiFLAdEbyJVHaxrN31al+e61sa8lfYiRwNCy8d4YW0KohLfS/5NUW2xxvFLgZaGBUwV1+l/4XiPl+ehj7MCbsNTZlK+X0JkT82kL9Z2N5QNACZ7nZlH5X6xPYldehs9IFIgw5jwU=,iv:MXbLB1+otY0FPybM2Dzv1pyNpAo0ajP9PjxyFMGHTMY=,tag:norYrQYtRY+HJm1/Sehbzw==,type:str]
+    pgp:
+        - created_at: "2021-12-18T19:52:00Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAxozgf2eefjfAQ//XAQCrrtb5PfXdAIVG5MKQnDgRCAlm83wRQGWxltTRl5A
+            4bnM6eSUbR80GsX2kwJJ3hxzQus5ZQxf9SnuzhC3X4jzzEi2GwZr8PruaSWTYM8E
+            KkXgt8UWjNEYLaxLU31RimDi1L8ONmspZ+P3JX40JhwibOPXbeJYJL+pAsouRAFU
+            HAVqbSWYLoXbJqK9Y+UJ3Ra0r34wCct9Jl288idQ3UXBaZ8kT40sglRzLQHnfQTl
+            /erNeh8R2Gp89QX9Vw6kPT06seCr8UeHgqn6XfH308Dr20xi8G9qTGqt3baqPOBx
+            sa5VlUtNX+O7//FouoZkUiuF9TqJcCItvyY6FsYYBtbZvlJS8SWsgkuYGB8BrLuk
+            CZeq6uZj1FSaOO4aU/hQq5oI9fDGXk+CBFihe1KVfvOM+7EiVSGehUJvp51Vddue
+            Rd9MSDyD8ntg0ic/BGOaVuDV6G7bmGnzW4N8iw1dQcppCYMeXo2oK7sK4e5/F/dq
+            N1AVgkJeu/0HiUwS4k6OD3thf+zrdbb6HYbifgd0A6pweoGYGJsbFa9Qc4goE6Tu
+            8qc3OtGiduH2wipQJDWpJSRy7HpkQ2y6Zw3ufnDke+5Vta7+LnsRLBSe0wxwX7aB
+            lodx6MXy2aM/LKd2BhFK+qAgKizB6sjKjWMLDgrbeqZDIsI60+umwr99FNVUwtvS
+            XgGyEJwZT7cYhULzE8WWuXO6y3aD/9RepRm3Rsh3LYMoZKOT2qavZsVJko1TyqHl
+            plph0h/+tYsmneIj43LgUJqZKn6Q1Wk6QH22Rt1GW6TkJZRNsTw+ViELcOQZFQA=
+            =/6dy
+            -----END PGP MESSAGE-----
+          fp: 7C207509562C208C4EC1676E87A8E5662DF00274
+        - created_at: "2021-12-18T19:52:00Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAwDgSONkM+d4AQ//YvYxPPGXMWoZKNp6V/a8YjRZ5GtsW6NULoxn1mSqjwGv
+            rnH2FJQaIhgNRDcGQuLyxkEhI6WVd2peCvh7FAzbonWq6piMFkkhUzO/vPzxFVzW
+            /glU5hHPOFhAXwMigtB9cAg84Vn39dcLSNIcawBEFYHHHkhWdxdyzVJsoMUfFh4c
+            W/rSqDBi2pwiwCHnqVo3G3RtmVK0GjTIc3QSuvwF5eboHh5/27biJ3KZasMQBbsW
+            4JU1KaF8hQr/a6S1GitONyTBYoMxKJed3i5Cu48jKBex9hjVBe0Wwklb8Nz3u6o5
+            fw9suLouDL7Lqoiy75UKGMpj7LFpj1jKCBPBrivKG2sMNSkF629pvbGaqkTr+7h+
+            d4eUY/IJT7Qc8KiSx9ZCCqlWzBW55fLKyVtTSk970qPMeqsF5/n/jSS3zV1N5DRi
+            xsULNqkbvrscJVOC76hIjLW9KfoWNFamQ/cJXy1I4/5BByIbzBOCztYZcb7XNcVg
+            AU9Dyw4ANaY75SmY4K3ebnOx+vNjIHRcZeySc0gVXju4MiluAvBAVg5lv6o3liRx
+            EurFvcP0xSt8H6A2/Cg5jIU8+BAA7XvIV1y0S1OF9WNpjdv9BcDZSH/jeFzqleNF
+            meN1EIzgh5CMMprzveom49sd+EhVD1zfPswBZJbi/xCPhDeeLJu546YEtF7crq3S
+            XgFnqNAaGjllr2kz1/x4uuxfC02zfYZiIk6MGwI6ToK6hJQUHODNJOB63UNPA1wd
+            sD/qHS4T4/D7P9JG9mZbIiIoLw9gcDtBKhHtQE8RsKSQnV5/r7995gRJhR1RXeY=
+            =hprK
+            -----END PGP MESSAGE-----
+          fp: 47E7559E037A35652DBBF8AA8D3C82F9F309F8EC
+        - created_at: "2021-12-18T19:52:00Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA8j3Zc+K0fiSARAArsim5SqLDRv+UNz9DmUOZwk5x7/esF5C5SsNM7Ko2xHd
+            Wc4xO2h4zKnCbaogDTu9/z3VCQtTVSMhKM8UXjcMfZ/l8jS/ralKZwyVvP3daR+f
+            hkRtLNXGftwrHcrey3CsxZXwNTmfCGfV7wvN/FvL1l7n4K/HkHrwbMLSMNb1T11p
+            SH6Fkx/tfvi4EeUi3B3J8NHX4AposgULMThbd5asp5lxibC+L7o72/32vTyVTofe
+            Uo/hZvnOtU5O+vWWc+/NI6QtanYVQJaRhoNf28uKWi4Dbo91exSi2adjkDVApyaE
+            oToqaBBaV+i1mXb0zJi/VHpd+cbz0u6xkFyPfoBm8otm/X6pem7+nFF65XLIXQZ7
+            HgETSEshU3zsf4mwyDx84bmTU1pF3c7O5n5lK+Ag4wuLYMQUwxdaH0mhXSBSfFO+
+            BKjHhL66vJqCYrBmfNNnP2n2IkigRUJPm4aw6vYXOEcthb+NHJYY+Q+AElv7oosN
+            79q1VfqPoPhs9sQA05CgPwF50dlh82qmN/U82vBwhDMQoAetFIJb6BWQtNMoFhCI
+            MUrcJf7VoAPFFiiaKAqudIcUnLjD7v+/wV1v33ApPPWUmYoQhm5oznAJsruncxwS
+            kAnymmp5cXmmWu1ImXI46QSxUuvTDiYrLqp3tBdUAKadvkUD0X+iljD/S4uIfzDS
+            UAF84HSK4O4qZVaL2DCKh2+rr8PxhzTYB/h7HRGpV78QIUSUresSMCfFpGjQUA2z
+            ebPq7pa7tQ6IiBigmApPAEYk4rfyVTqfk9fOqwg/Cq6j
+            =Jfbg
+            -----END PGP MESSAGE-----
+          fp: 10E468768E3BCD6459F9F11AC8F765CF8AD1F892
+    unencrypted_suffix: _unencrypted
+    version: 3.7.1
diff --git a/machines/raven/services/default.nix b/machines/raven/services/default.nix
index fbe2f0c..37fec97 100644
--- a/machines/raven/services/default.nix
+++ b/machines/raven/services/default.nix
@@ -1,6 +1,7 @@
 {
   imports = [
     ./dnsmasq.nix
+    ./dyndns.nix
     ./labsync.nix
   ];
 }
diff --git a/machines/raven/services/dyndns.nix b/machines/raven/services/dyndns.nix
new file mode 100644
index 0000000..2c64bbe
--- /dev/null
+++ b/machines/raven/services/dyndns.nix
@@ -0,0 +1,17 @@
+{ config, ... }:
+{
+  sops.secrets.dyndns-password = {
+    sopsFile = ../secrets.yaml;
+  };
+  services.ddclient = {
+    enable = true;
+    interval = "1min";
+    use = "web, web=checkip.dynu.com/, web-skip='IP Address'";
+    server = "api.dynu.com";
+    protocol = "dyndns2";
+    username = "fablabnea";
+    passwordFile = config.sops.secrets.dyndns-password.path;
+    domains = [ "fablab-nea.freeddns.org" ];
+    ipv6 = false;
+  };
+}