/**
 * deSEC dynDNS integration.
 * Updates the domain's A record to point to the current host IP on startup.
 * Config stored in .bobbit/state/desec.json
 */
export interface DesecConfig {
    domain: string;
    token: string;
}
/** Load deSEC config from disk, or null if not configured. */
export declare function loadDesecConfig(): DesecConfig | null;
/** Save deSEC config to disk. */
export declare function saveDesecConfig(config: DesecConfig): void;
/**
 * Update the deSEC domain's A record to point to the given IP.
 * Called on server startup to keep dynDNS fresh.
 * Fails silently — cert/DNS issues shouldn't prevent server from starting.
 */
export declare function updateDesecIp(config: DesecConfig, ip: string): Promise<void>;
//# sourceMappingURL=desec.d.ts.map