pinwheel: Add naviterm config secret, fix syncthing dir ownership

hosts/pinwheel/modules/music/default.nix

@@ -54,4 +54,17 @@ in
       ExecStart = "${pkgs.playerctl}/bin/playerctld";
     };
   };
+
+  # Ensure the parent dir of the secret's path is owned by alex; otherwise
+  # agenix creates it as root.
+  systemd.tmpfiles.rules = [
+    "d /home/alex/.config/naviterm 0755 alex users -"
+  ];
+
+  age.secrets."naviterm-config" = {
+    file = ../../../../secrets/pinwheel/naviterm-config.age;
+    path = "/home/alex/.config/naviterm/config.ini";
+    owner = "alex";
+    group = "users";
+  };
 }