sombrero: Update syncthing password

hosts/sombrero/modules/syncthing/default.nix

@@ -1,4 +1,4 @@
-{ lib, config, ... }:
+{ pkgs, lib, config, ... }:
 let
   enabled = config.mod.syncthing.enable;
   nginxEnabled = config.mod.nginx.enable;
@@ -33,12 +33,10 @@ in
         guiAddress = "0.0.0.0:8384";
 
         settings = {
-          extraOptions = {
-            gui = {
-              user = "syncthing";
-              password = "CBLPEBrHoGPOnfdZtLibnSAaPAALXfSU";
-              insecureSkipHostcheck = false;
-            };
+          gui = {
+            user = "syncthing";
+            password = "$(${pkgs.coreutils}/bin/cat ${config.age.secrets.syncthing-password.path})";
+            insecureSkipHostcheck = false;
           };
 
           devices = {
@@ -137,6 +135,11 @@ in
       secrets = {
         "syncthing-cert".file = ../../../../secrets/sombrero/syncthing-cert.age;
         "syncthing-key".file = ../../../../secrets/sombrero/syncthing-key.age;
+        "syncthing-password" = {
+          file = ../../../../secrets/sombrero/syncthing-password.age;
+          owner = "alex";
+          group = "users";
+        };
       };
     };
   };

secrets/secrets.nix

@@ -23,6 +23,7 @@ in {
 
   "sombrero/syncthing-cert.age".publicKeys = [ sombrero alex ];
   "sombrero/syncthing-key.age".publicKeys = [ sombrero alex ];
+  "sombrero/syncthing-password.age".publicKeys = [ sombrero alex ];
   "sombrero/alex.sombrero-github.com.age".publicKeys = [ sombrero alex ];
   "sombrero/alex.sombrero-github.com.pub.age".publicKeys = [ sombrero alex ];
   "pinwheel/alex.sombrero-codeberg.org.age".publicKeys = [ sombrero alex ];

secrets/sombrero/syncthing-password.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 MxZlmA nx1zNgQ2P8plL9XugoiAFWj/7NsYhDNoDSi7GJ6lrl0
+EBKUnHWTO4aLOoL35ksxkeYrlePsvbLGWVVY3IwV5qc
+-> ssh-ed25519 ek+b7Q NDyCYRFhUMbl9IlDLPFvosUV7D3PEGJvNUgn0xEPg3E
+eGRiqeLIZOF/1m/IdoaxOlbxXcn/JI6+NQI2M/GbX5I
+--- Wz6fzhu7i3Ga3+n2dznjPXOQBGOgBosDARijldd3YcQ
+
<01>?2V0F
<01><><EFBFBD>v_<76>=<3D><<3C><><EFBFBD>S<EFBFBD>B<EFBFBD>	i6<69>zC<7A><0C><>8<><7F>?<3F><>D<EFBFBD><19>յ<EFBFBD>Q