hd/cfg
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

improve syncthing config

Browse source
This commit is contained in:
Henri Dohmen 2025-12-30 14:49:21 +01:00
parent 72c6b7ce88
commit 6461102325
Signed by: hd
GPG key ID: AB79213B044674AE
5 changed files with 52 additions and 31 deletions
Download patch file Download diff file Expand all files Collapse all files

49
mod/syncthing.nix
View file

@ -9,44 +9,47 @@ let
cfg = config.services.syncthing;
this = config.networking.hostName;
is-managed = builtins.elem this var.syncthing-managed-clients.managed_clients;
is-managed = var.syncthing.managed ? ${this};
is-server = this == "roam";
devices = [
"roam"
"fw"
];
devices = lib.attrNames var.syncthing.all;
desktop-devices = (lib.intersectLists var.desktops devices);
devices-without-this = lib.remove this devices;
type-encrypt = if is-server then "receiveencrypted" else "sendreceive";
devices-encrypt =
if is-server then
devices-without-this
else
lib.remove "roam" devices-without-this
++ [
{
name = "roam";
encryptionPasswordFile = config.age.secrets.syncthing-password.path;
}
];
folders = folders-all // (if config.hd.desktop.enable then folders-desktop else { });
folders = {
folders-all = {
documents = {
id = "documents-hd";
path = if is-server then "/data/sync/documents-hd" else "/home/hd/Documents";
type = type-encrypt;
devices = devices-encrypt;
type = if is-server then "receiveencrypted" else "sendreceive";
# all clients (desktops + servers) that have are a synthing peer but
# with untrusted servers
devices =
desktop-devices
++ (
if this != "roam" then
[
{
name = "roam";
encryptionPasswordFile = config.age.secrets.syncthing-password.path;
}
]
else
[ ]
);
versioning = {
type = "simple";
params.keep = "10";
};
};
};
folders-desktop = {
supernote-note = rec {
id = "supernote-note";
path = if is-server then "/data/sync/${id}" else "/home/hd/Documents/Supernote/Notizen";
type = "sendreceive";
devices = devices-without-this ++ [ "supernote" ];
devices = desktop-devices ++ [ "supernote" ];
versioning = {
type = "simple";
params.keep = "10";
@ -74,7 +77,7 @@ in
{
inherit folders;
settings = {
devices = var.syncthing;
devices = var.syncthing.all;
};
key = lib.optionalAttrs is-managed config.age.secrets.syncthing-key.path;
cert = lib.optionalAttrs is-managed "${../pki/syncthing + "/${this}.cert"}";