From f2f386c0215eec48acf151bda5bdc7667ce32b1e Mon Sep 17 00:00:00 2001
From: Lilly <lilly@hibana.me>
Date: Wed, 7 Jan 2026 13:33:14 +0000
Subject: [PATCH] Auto-commit: 2026-01-07 13:33:14

---
 hosts/lillyserver/systemd.nix | 17 +++++++++++++++--
 1 file changed, 15 insertions(+), 2 deletions(-)

diff --git a/hosts/lillyserver/systemd.nix b/hosts/lillyserver/systemd.nix
index a6a211b..7836b22 100644
--- a/hosts/lillyserver/systemd.nix
+++ b/hosts/lillyserver/systemd.nix
@@ -1,6 +1,11 @@
+{ pkgs, ... }:
+let
+  crowdsecservice = "crowdsec-prefix";
+  tailscale-cloudflare-dns-sync-service = "tailscale-cloudflare-dns-sync";
+in
 {
   systemd.services = {
-    crowdsec-prefix = {
+    ${crowdsecservice} = {
       enable = true;
       description = "Get IPv6 Prefix to add to Crowdsec Whitelist";
       serviceConfig = {
@@ -9,9 +14,17 @@
         WorkingDirectory = "/mnt/lilly-ssd/appdata/crowdsec/crowdsec-prefix-change-script";
       };
     };
+    ${tailscale-cloudflare-dns-sync-service} = {
+      enable = true;
+      description = "Start the tailscale-cloudflare-dns-sync Docker container";
+      serviceConfig = {
+        Type = "oneshot";
+        ExecStart = "${pkgs.docker}/bin/docker start tailscale-cloudflare-dns-sync";
+      };
+    };
   };
   systemd.timers = {
-    crowdsec-prefix = {
+    ${crowdsecservice} = {
       enable = true;
       description = "Run Crowdsec-Prefix check regularly.";
       timerConfig = {