{
  lib,
  config,
  ...
}: let
  cfg = config.services.ddclientovh;

  passwords = import ../../variables/passwords.crypt.nix;
in {
  options.services.ddclientovh = with lib; {
    enable = mkEnableOption "Enable ddclient-ovh";
    domain = mkOption {type = types.str;};
  };

  config = lib.mkIf cfg.enable {
    services.ddclient = {
      enable = true;
      protocol = "dyndns2";
      server = "www.ovh.com";
      ssl = true;
      domains = [cfg.domain];
      use = "web";
      inherit (passwords.dyndns.${cfg.domain}) username;
      passwordFile =
        builtins.toFile passwords.dyndns._filename
        passwords.dyndns.${cfg.domain}.password;
    };
  };
}