nixos/modules/syncthing.nix

{ ... }: {
  # Syncthing is a continuous file synchronization program. It synchronizes
  # files between two or more computers in real time. It's basically a
  # self-hosted Dropbox for Linux users, but without FTP, curlftpfs, and SVN.
  # https://nixos.wiki/wiki/Syncthing

  services.syncthing = {
    enable = true;
    user = "caspervk";
    group = "users";
    # The directory where synchronised directories will exist
    dataDir = "/home/caspervk";
    # Devices ignore their own IDs, allowing for a single configuration.
    # TODO: Syncthing generates a private key and ID the first time it is
    # started. On first install, add the devices' ID here and apply to the
    # other ones. When we get a proper secret management scheme, such as
    # agenix, the private keys should be managed declaratively as well.
    devices = {
      "lambda" = {
        id = "WES3JH4-S34HTC5-42YZHUJ-MX3Z6PA-PFO72KA-YIJMDOB-GQWZXZ3-I7BBTAS";
        addresses = [ "tcp://lambda.caspervk.net" ];
      };
      "omega" = { id = "EZIQ7SI-Y6BBLUY-QI4EEYU-UNIXPSG-R6X5E77-AA2UC7S-VRV2LKQ-RNBOGQT"; };
      "S10e" = { id = "DWC6YHB-FRYKFHD-FPOUITV-7GL2WZH-RSFOJXR-PHYXDO7-74NLBUZ-TZENVAC"; };
      "zeta" = { id = "GQRNHAQ-MMRQYMD-P4RCA6I-5DJ3HXO-J2N2GVP-UGI55YR-HD3EYSO-ERU5QQV"; };
    };
    folders = {
      "keepass" = {
        path = "~/keepass";
        devices = [ "lambda" "omega" "S10e" "zeta" ];
      };
      "sync" = {
        path = "~/sync";
        devices = [ "lambda" "omega" "zeta" ];
      };
    };
  };
}