syncthing: Init

machines/fuuko/configuration.nix

@@ -48,6 +48,8 @@
   networking.firewall.allowedTCPPorts = [ 80 443 ];
   systemd.services.nginx.serviceConfig.SupplementaryGroups = lib.singleton "keys";
 
+  services.syncthing.enable = true;
+
   networking.hostName = "fuuko";
 
   system.stateVersion = "20.09";

modules/default.nix

@@ -44,6 +44,7 @@
     ./restic
     ./secrets.nix
     ./ssh.nix
+    ./syncthing.nix
     ./tools.nix
     ./udev.nix
     ./unfree.nix

modules/syncthing.nix

@@ -0,0 +1,26 @@
+{ config, lib, ... }:
+
+{
+  services.syncthing = {
+    enable = lib.mkDefault config.sbruder.gui.enable;
+    guiAddress = "${config.sbruder.wireguard.home.address}:8384";
+    openDefaultPorts = true;
+
+    user = "simon";
+    dataDir = "/home/simon";
+
+    overrideDevices = false;
+    devices = {
+      fuuko = {
+        addresses = [
+          "tcp://fuuko.home.sbruder.de:22000"
+        ];
+        id = "Z2OO5LK-N3UVCRD-QKVKLZ3-3LRXUOH-JENBAKQ-M647E3L-7FL6LIE-74GGHQF";
+      };
+    };
+
+    overrideFolders = false;
+    # folders are not managed statically, because the list of devices can’t be
+    # easily generated from the configuration
+  };
+}