feat: remove agenix and use git-crypt instead

2026-02-10 16:56:19 +01:00
parent f2d5672577
commit 39c596c17e
12 changed files with 44 additions and 213 deletions
@@ -0,0 +1,38 @@
+{
+  pkgs,
+  ...
+}:
+let
+  pyenv = pkgs.python3.withPackages (
+    ps: with ps; [
+      nc-dnsapi
+      python-dotenv
+    ]
+  );
+in
+{
+  users.groups.dyndns = { };
+  users.users.dyndns = {
+    isSystemUser = true;
+    group = "dyndns";
+    description = "DynDNS service user";
+  };
+
+  systemd.timers."dyndns" = {
+    requires = [ "network-online.target" ];
+    wantedBy = [ "timers.target" ];
+    timerConfig = {
+      OnBootSec = "5m";
+      OnUnitActiveSec = "5m";
+      Unit = "dyndns.service";
+    };
+  };
+
+  systemd.services."dyndns" = {
+    serviceConfig = {
+      Type = "oneshot";
+      User = "dyndns";
+      ExecStart = "${pyenv.interpreter} ${./dyndns.py} ${./nc.env.secret}";
+    };
+  };
+}