86 lines
2.3 KiB
Nix
Executable File
86 lines
2.3 KiB
Nix
Executable File
{
|
|
pkgs,
|
|
config,
|
|
lib,
|
|
...
|
|
}: let
|
|
service = "syncthing";
|
|
cfg = config.holocron.${service};
|
|
sec = config.sops.secrets;
|
|
url = "syncthing.snowbelle.lan";
|
|
homelab = config.homelab;
|
|
in {
|
|
options.holocron.${service} = {
|
|
enable = lib.mkEnableOption "enables syncthing";
|
|
};
|
|
|
|
config = lib.mkIf cfg.enable {
|
|
services.syncthing = {
|
|
enable = true;
|
|
user = "blake";
|
|
group = "blake";
|
|
dataDir = "/var/lib/syncthing";
|
|
guiAddress = "0.0.0.0:2222";
|
|
openDefaultPorts = true;
|
|
extraFlags = ["--no-default-folder"];
|
|
key = sec."${service}/snowbelle/key".path;
|
|
cert = sec."${service}/snowbelle/cert".path;
|
|
settings = {
|
|
devices = {
|
|
"lugia" = {id = "BKKSFPH-YEOVVAB-DTT7KK3-UDKAEJ2-PC6ECG7-Y76ZIVP-JRYMMXS-RTZYVQ3";};
|
|
"zygarde" = {id = "UYLTF52-VVKUR7F-JN33HQZ-RFNWGL3-JER52LA-GZD2LPJ-QIFEE7K-MNMZRQ5";};
|
|
"CEN-IT-07" = {id = "DPYKA4Z-3PX7JB2-FBEOXXX-SC7TLT2-QC5P2IR-SXOPJGX-QO3DMII-5B7UCA4";};
|
|
};
|
|
folders = {
|
|
"holocron" = {
|
|
path = "/holocron/users/blake/holocron";
|
|
devices = ["lugia" "zygarde" "CEN-IT-07"];
|
|
id = "5voxg-c3he2";
|
|
versioning = {
|
|
type = "staggered";
|
|
fsPath = "/holocron/users/blake/holocron/.stversions";
|
|
params = {
|
|
cleanInterval = "3600";
|
|
maxAge = "0";
|
|
};
|
|
};
|
|
|
|
};
|
|
};
|
|
options = {
|
|
urAccepted = -1;
|
|
};
|
|
};
|
|
};
|
|
|
|
sops.secrets = {
|
|
"${service}/snowbelle/key" = {
|
|
owner = "blake";
|
|
group = "blake";
|
|
};
|
|
"${service}/snowbelle/cert" = {
|
|
owner = "blake";
|
|
group = "blake";
|
|
};
|
|
};
|
|
homelab.backups.baks = {
|
|
${service} = { paths = [ config.services.syncthing.dataDir ]; };
|
|
};
|
|
|
|
services.caddy.virtualHosts."${url}" = {
|
|
extraConfig = ''
|
|
tls /etc/ssl/blakedheld.xyz.crt /etc/ssl/blakedheld.xyz.key
|
|
reverse_proxy 127.0.0.1:2222
|
|
'';
|
|
};
|
|
|
|
# add to glance (local service)
|
|
homelab.glance.links.system = [{
|
|
title = service;
|
|
url = "https://${url}";
|
|
error-url = "http://${homelab.host_ip}:2222";
|
|
check-url = "http://${homelab.host_ip}:2222";
|
|
icon = "di:${service}"; }];
|
|
};
|
|
}
|