{ config, ... }:
{
  services.syncthing = {
    enable = true;
    openDefaultPorts = true;

    cert = config.age.secrets.syncthing-cert.path;
    key = config.age.secrets.syncthing-key.path;

    user = "alex";
    group = "users";

    dataDir = "/home/alex/sync";
  };

  age = {
    secrets = {
      "syncthing-cert".file = ../../../../secrets/backwards/syncthing-cert.age;
      "syncthing-key".file = ../../../../secrets/backwards/syncthing-key.age;
    };
  };
}