diff --git a/modules/nixos/deno-netlify-ddns-client.nix b/modules/nixos/deno-netlify-ddns-client.nix
index 193c256..b491363 100644
--- a/modules/nixos/deno-netlify-ddns-client.nix
+++ b/modules/nixos/deno-netlify-ddns-client.nix
@@ -64,18 +64,22 @@ in {
         set -eu
         password="$(cat "${cfg.passwordFile}")"
         ${optionalString cfg.ipv4 ''
-          ${pkgs.curl}/bin/curl -4 -s \
+          "${pkgs.curl}/bin/curl" -4 -s \
+            -vvv \
             -X POST \
             --max-time ${toString cfg.requestTimeout} \
             -u "${cfg.username}:''${password}" \
-            -L "${cfg.endpoint}/v1/netlify-ddns/replace-all-relevant-user-dns-records"
+            -L "${cfg.endpoint}/v1/netlify-ddns/replace-all-relevant-user-dns-records" \
+            | "${pkgs.ripgrep}/bin/ripgrep" --fixed-strings "''${password}" -r "[REDACTED]"
         ''}
         ${optionalString cfg.ipv6 ''
           ${pkgs.curl}/bin/curl -6 -s \
+            -vvv \
             -X POST \
             --max-time ${toString cfg.requestTimeout} \
             -u "${cfg.username}:''${password}" \
-            -L "${cfg.endpoint}/v1/netlify-ddns/replace-all-relevant-user-dns-records"
+            -L "${cfg.endpoint}/v1/netlify-ddns/replace-all-relevant-user-dns-records" \
+            | "${pkgs.ripgrep}/bin/ripgrep" --fixed-strings "''${password}" -r "[REDACTED]"
         ''}
       '';
       serviceConfig = {