{ config, pkgs, ... }:

{
  services.cloudflared.enable = true;
  services.cloudflared.tunnels."65c093ce-a3ac-4369-b240-2169514be106" = {
    credentialsFile = "/etc/secrets/65c093ce-a3ac-4369-b240-2169514be106.json";
    ingress = {
      "kemonomimi.pet" = "http://localhost:8679";
      "fedi.kemonomimi.pet" = "http://localhost:8678";
      "media.kemonomimi.pet" = "http://localhost:8678";
    };
    default = "http_status:404";
  };

  services.cloudflare-dyndns = {
    enable = true;
    
    domains = [ "danielk.me" ]; 
    
    apiTokenFile = "/etc/secrets/cloudflare-api-token";
    
    proxied = false;
    ipv4 = true;
    ipv6 = false;
  };
}