131 lines
3.2 KiB
Nix
131 lines
3.2 KiB
Nix
{ pkgs, lib, config, ... }:
|
|
let
|
|
enabled = config.mod.syncthing.enable;
|
|
nginxEnabled = config.mod.nginx.enable;
|
|
in
|
|
{
|
|
options = {
|
|
mod.syncthing = {
|
|
enable = lib.mkEnableOption "add syncthing module";
|
|
};
|
|
};
|
|
|
|
config = lib.mkIf (enabled && nginxEnabled) {
|
|
networking = {
|
|
firewall = {
|
|
allowedTCPPorts = [ 8384 ];
|
|
};
|
|
};
|
|
|
|
services = {
|
|
syncthing = {
|
|
enable = true;
|
|
openDefaultPorts = true;
|
|
|
|
user = "alex";
|
|
group = "users";
|
|
|
|
dataDir = "/home/alex/backup/sync";
|
|
|
|
cert = config.age.secrets.syncthing-cert.path;
|
|
key = config.age.secrets.syncthing-key.path;
|
|
|
|
guiAddress = "0.0.0.0:8384";
|
|
|
|
settings = {
|
|
gui = {
|
|
user = "syncthing";
|
|
password = "$2a$12$J/h/JOUiW24ZXsLYLEl2kOZUS1LftxANi0OlZxLy8Dst3/jpBd0v2";
|
|
insecureSkipHostcheck = false;
|
|
};
|
|
|
|
devices = {
|
|
phone.id = config.lib.syncthing.phone;
|
|
pinwheel.id = config.lib.syncthing.pinwheel;
|
|
};
|
|
|
|
folders = {
|
|
"org" = {
|
|
path = "/home/alex/backup/sync/org";
|
|
devices = [ "phone" "pinwheel" ];
|
|
versioning = {
|
|
type = "staggered";
|
|
params = {
|
|
maxAge = "2592000"; # 30 days
|
|
};
|
|
};
|
|
};
|
|
|
|
"phone-gps" = {
|
|
path = "/home/alex/backup/sync/gps";
|
|
devices = [ "phone" ];
|
|
versioning = {
|
|
type = "staggered";
|
|
params = {
|
|
maxAge = "2592000"; # 30 days
|
|
};
|
|
};
|
|
};
|
|
|
|
"personal" = {
|
|
path = "/home/alex/backup/sync/personal";
|
|
devices = [ "pinwheel" ];
|
|
versioning = {
|
|
type = "staggered";
|
|
params = {
|
|
maxAge = "2592000"; # 30 days
|
|
};
|
|
};
|
|
};
|
|
|
|
"work" = {
|
|
path = "/home/alex/backup/sync/work";
|
|
devices = [ "pinwheel" ];
|
|
versioning = {
|
|
type = "staggered";
|
|
params = {
|
|
maxAge = "2592000"; # 30 days
|
|
};
|
|
};
|
|
};
|
|
|
|
"books" = {
|
|
path = "/home/alex/backup/books";
|
|
devices = [ "pinwheel" ];
|
|
versioning = {
|
|
type = "staggered";
|
|
params = {
|
|
maxAge = "2592000"; # 30 days
|
|
};
|
|
};
|
|
};
|
|
|
|
"audiobooks" = {
|
|
path = "/home/alex/media/sync/audiobooks";
|
|
devices = [ "phone" ];
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
nginx = {
|
|
virtualHosts."syncthing.sombrero.a2x.se" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
|
|
locations."/" = {
|
|
proxyPass = "http://0.0.0.0:8384";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
age = {
|
|
secrets = {
|
|
"syncthing-cert".file = ../../../../secrets/sombrero/syncthing-cert.age;
|
|
"syncthing-key".file = ../../../../secrets/sombrero/syncthing-key.age;
|
|
};
|
|
};
|
|
};
|
|
}
|