diff options
Diffstat (limited to '')
| -rw-r--r-- | flake.nix | 1 | ||||
| -rw-r--r-- | modules/default.nix | 1 | ||||
| -rw-r--r-- | modules/syncthing/default.nix | 45 | ||||
| m--------- | secrets | 0 |
4 files changed, 47 insertions, 0 deletions
@@ -110,6 +110,7 @@ monitoring-node homepage web + syncthing { services.nginx.virtualHosts."musicbrainz.vapor.systems" = (self.lib.nginx.proxyDomain "vapor.systems" "http://127.0.0.1:5000/"); } diff --git a/modules/default.nix b/modules/default.nix index 8843f86..46a058c 100644 --- a/modules/default.nix +++ b/modules/default.nix @@ -39,4 +39,5 @@ mailserver = import ./mailserver; web = import ./web; + syncthing = import ./syncthing; } diff --git a/modules/syncthing/default.nix b/modules/syncthing/default.nix new file mode 100644 index 0000000..2136a49 --- /dev/null +++ b/modules/syncthing/default.nix @@ -0,0 +1,45 @@ +{ + config, + lib, + pkgs, + ... +}: + +{ + services.syncthing = { + enable = true; + # Open ports in the firewall for Syncthing. (NOTE: this will not open syncthing gui port) + openDefaultPorts = true; + key = "/run/secrets/syncthing/key.pem"; + cert = "/run/secrets/syncthing/cert.pem"; + + settings = { + devices = { + "ffm0089" = { + id = "D5LYWQQ-GRV6QOK-RXYD32P-YNNFU3C-C7XOEY2-EWHCWSQ-3XC4CHG-EWMOMQZ"; + }; + # "liduur" = { id = "DEVICE-ID-GOES-HERE"; }; + }; + folders = { + ".org" = { + path = "/home/audron/.org"; + devices = [ + "ffm0089" + # "liduur" + ]; + }; + }; + }; + }; + + secrets = { + syncthingKey = { + source = ../../secrets/syncthing/key.pem; + dest = config.services.syncthing.key; + }; + syncthingCert = { + source = ../../secrets/syncthing/cert.pem; + dest = config.services.syncthing.cert; + }; + }; +} diff --git a/secrets b/secrets -Subproject bb6cfb47fc1e1d26444fb93ecfe03868bc74462 +Subproject 9dfcb67322112740f15af46350549b9f9092857 |