{
  pkgs,
  config,
  lib,
  ...
}: let
  service = "syncthing";
  cfg = config.holocron.${service};
  sec = config.sops.secrets;
  url = "syncthing.snowbelle.lan";
  homelab = config.homelab;
in {
  options.holocron.${service} = {
    enable = lib.mkEnableOption "enables syncthing";
  };

  config = lib.mkIf cfg.enable {
    services.syncthing = {
      enable = true;
      user = "blake";
      group = "blake";
      dataDir = "/var/lib/syncthing";
      guiAddress = "0.0.0.0:2222";
      openDefaultPorts = true;
      extraFlags = ["--no-default-folder"];
      key = sec."${service}/snowbelle/key".path;
      cert = sec."${service}/snowbelle/cert".path;
      settings = {
        devices = {
          "lugia" = {id = "BKKSFPH-YEOVVAB-DTT7KK3-UDKAEJ2-PC6ECG7-Y76ZIVP-JRYMMXS-RTZYVQ3";};
          "zygarde" = {id = "UYLTF52-VVKUR7F-JN33HQZ-RFNWGL3-JER52LA-GZD2LPJ-QIFEE7K-MNMZRQ5";};
          "CEN-IT-07" = {id = "DPYKA4Z-3PX7JB2-FBEOXXX-SC7TLT2-QC5P2IR-SXOPJGX-QO3DMII-5B7UCA4";};
        };
        folders = {
          "holocron" = {
            path = "/holocron/users/blake/holocron";
            devices = ["lugia" "zygarde" "CEN-IT-07"];
            id = "5voxg-c3he2";
            versioning = {
              type = "staggered";
              fsPath = "/holocron/users/blake/holocron/.stversions";
              params = {
                cleanInterval = "3600";
                maxAge = "0";
              };
            };

          };
        };
        options = {
          urAccepted = -1;
        };
      };
    };

    sops.secrets = {
      "${service}/snowbelle/key" = {
        owner = "blake";
        group = "blake";
      };
      "${service}/snowbelle/cert" = {
        owner = "blake";
        group = "blake";
      };
    };
    homelab.backups.baks = {
      ${service} = { paths = [ config.services.syncthing.dataDir ]; };
    };

    services.caddy.virtualHosts."${url}" = {
      extraConfig = ''
        tls /etc/ssl/blakedheld.xyz.crt /etc/ssl/blakedheld.xyz.key
        reverse_proxy 127.0.0.1:2222
      '';
    };

    # add to glance (local service)
    homelab.glance.links.system = [{
      title = service;
      url = "https://${url}";
      error-url = "http://${homelab.host_ip}:2222";
      check-url = "http://${homelab.host_ip}:2222";
      icon = "di:${service}"; }];
  };
}