#cloudflare-ddns.nix
{ config, pkgs, lib, ... }:
{
	config = lib.mkIf (config.networking.hostName == "FredOS-Mediaserver") {
      services.cloudflare-dyndns = {
        enable = true;
        apiTokenFile = "/var/secrets/cloudflare-token";
        domains = [ "nordhammer.it" ];
      };

      # network-online.target stays active while AdGuard is restarted during
      # deployment.  Wait for AdGuard's DNS-readiness check as well.
      systemd.services.cloudflare-dyndns = {
        after = [ "network-online.target" "adguardhome.service" ];
        wants = [ "network-online.target" "adguardhome.service" ];
      };
	};
}