Common: set syncthing options

machines/Everest/configuration.nix

@@ -59,10 +59,9 @@
 	};
 
 	# Open ports in the firewall.
-	# 8384 is syncthing's webui, and 22000 is syncthing related too
-	# No idea what 5201 and 21027 do tho
-	networking.firewall.allowedTCPPorts = [ 5201 8384 22000 ];
-	networking.firewall.allowedUDPPorts = [ 5201 22000 21027];
+	# No idea what ports 5201 and 21027 do tho
+	networking.firewall.allowedTCPPorts = [ 5201 ];
+	networking.firewall.allowedUDPPorts = [ 5201 21027];
 	# Or disable the firewall altogether.
 	# networking.firewall.enable = false;
 }

roles/common/services/syncthing.nix

@@ -1,8 +1,16 @@
 { config, ... }:
 
 {
-	# Set up devices and folders common to every device
 	services.syncthing = {
+		overrideDevices = true;
+		overrideFolders = true;
+		openDefaultPorts = true;
+		extraOptions = {
+			options = {
+				urAccepted = 3;
+			};
+		};
+		# Set up devices and folders common to every device
 		devices = {
 			"phone" = {
 				name = "Xiaomi Redmi Note 10 Pro";
@@ -16,12 +24,16 @@
 				name = "Steam Deck";
 				id = "DLQPL74-KEQTPM5-X4PDZHB-4HLQYHV-UCMJLOB-P6W3KWU-QLJADBY-V4KEMA5";
 			};
+			"server" = {
+				name = "Everest";
+				id = "BVJBCAZ-WDIWBFR-CK3WB3N-TWH3UXX-EPZXVWE-BLQ3IDU-U7MHVVB-WO4BKAJ";
+			};
 		};
 		folders = {
 			"passwords" = {
 				label = "KeePassXC Passwords";
 				id = "rdyaq-ex659";
-				devices = [ "phone" "pc" "steamdeck"];
+				devices = [ "phone" "pc" "steamdeck" "server"];
 			};
 		};
 	};

roles/desktop/services/default.nix

@@ -4,5 +4,6 @@
 	imports = [
 		./ssh-agent.nix
 		./flatpak.nix
+		./syncthing.nix
 	];
 }

roles/desktop/services/syncthing.nix

@@ -0,0 +1,11 @@
+{ config, ... }:
+
+{
+	services.syncthing = {
+		enable = true;
+		user = "toast";
+		group = "users";
+		dataDir = config.users.users.toast.home;
+		folders."passwords".path = "~/Documents/Passwords";
+	};
+}