up

hosts/nixos/tahani/default.nix

@@ -1,7 +1,6 @@
 {
   pkgs,
   hostname,
-sops,
   user,
   ...
 }: {
@@ -52,7 +51,30 @@ sops,
     nameservers = ["1.1.1.1"];
   };
 
-  sops.defaultSopsFile = "./secrets/tahani.yaml";
+  sops.secrets = {
+    syncthing-cert = {
+      sopsFile = "secrets/tahani-syncthing-cert";
+      format = "binary";
+      path = "/home/${user}/.config/syncthing/cert.pem";
+    };
+  };
+
+  services.syncthing = {
+    enable = true;
+    openDefaultPorts = true;
+    dataDir = "/home/${user}/.local/share/syncthing";
+    configDir = "/home/${user}/.config/syncthing";
+    user = "${user}";
+    group = "users";
+    guiAddress = "0.0.0.0:8384";
+    overrideFolders = true;
+    overrideDevices = true;
+
+    settings = {
+      devices = {};
+      options.globalAnnounceEnabled = false;
+    };
+  };
 
   services.postgresql = {
     enable = true;