{
  config,
  ...
}:
{
  services.ddns-updater = {
    enable = true;
    environment = {
      PERIOD = "5m";
      # ddns-updater reads config from this path at runtime
      CONFIG_FILEPATH = config.age.secrets.ddns-updater-config.path;
    };
  };
}