ctucx.git: nixfiles

ctucx' nixfiles

commit 6c7b5b3831abc1f14c66ea03d5383c274e82a7ce
parent 0a0ddf89c2a1809a5e6e45dd0415d12f982a71e3
Author: Leah (ctucx) <git@ctu.cx>
Date: Thu, 10 Oct 2024 14:13:35 +0200

machines/wanderduene: add syncthing
6 files changed, 77 insertions(+), 0 deletions(-)
diff --git a/configurations/common/syncthing-config.nix b/configurations/common/syncthing-config.nix
@@ -5,9 +5,14 @@ let
     #mobile devices
     blechkasten.id    = "HGPWBVY-RD4JKBQ-X3V53IB-KRVDXEQ-4YLN5F2-WPPSMYR-SOXGTY6-IDFOAAC";
     coladose.id       = "BNCAOEB-CYTYIBA-ZKFJKRB-DX4C3MT-SDH7IWQ-5EI35PJ-YUIJSYH-COCGUAW";
+
     iphone.id         = "3SM3LJV-XMHYW2D-MU5WQ3T-KGYUJOI-LXOL6YI-BSVZ2B5-QJ6GVXN-MPWMKQ7";
 
     #servers
+    wanderduene = {
+      name = "wanderduene.ctu.cx";
+      id   = "WEFYARN-GY3WZXB-TIXBI56-ZZ77AHS-GFH5SH2-Q35NTBI-VPT3OEM-EQNAMQH";
+    };
     briefkasten = {
       name = "briefkasten.home.ctu.cx";
       id   = "QI2EPUE-4VMZ3XV-LXX3GXP-RHCWTRY-AACLSGL-YG7MIYV-THST74N-KJGIBQ6";
diff --git a/machines/wanderduene/default.nix b/machines/wanderduene/default.nix
@@ -16,6 +16,8 @@
 
     ./3proxy.nix
 
+    ./syncthing.nix
+
     ./dendrite.nix
 
     ./websites
diff --git a/machines/wanderduene/syncthing.nix b/machines/wanderduene/syncthing.nix
@@ -0,0 +1,22 @@
+{ config, lib, pkgs, ... }:
+
+{
+
+  ctucxConfig.services.syncthing.enable = true;
+
+  services.syncthing = rec {
+    dataDir = "/home/leah/syncthing";
+    settings.folders = {
+      "${dataDir}/Audiobooks".enable         = lib.mkForce false;
+      "${dataDir}/Music".enable              = lib.mkForce false;
+      "${dataDir}/Music (Originals)".enable  = lib.mkForce false;
+      "${dataDir}/Pictures".enable           = lib.mkForce false;
+      "${dataDir}/Videos".enable             = lib.mkForce false;
+      "${dataDir}/Media (legacy)".enable     = lib.mkForce false;
+      "${dataDir}/Bahn-Richtlinien".enable   = lib.mkForce false;
+      "${dataDir}/Bahn-Blechelse".enable     = lib.mkForce false;
+      "${dataDir}/Wiki".enable               = lib.mkForce false;
+    };
+  };
+
+}+
\ No newline at end of file
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
@@ -90,6 +90,10 @@ in {
   "trabbi/mail/password-mail-zug.network.age".publicKeys            = [ leah trabbi ];
 
 
+  "wanderduene/syncthing/key.age".publicKeys                        = [ leah wanderduene ];
+  "wanderduene/syncthing/cert.age".publicKeys                       = [ leah wanderduene ];
+
+
   "wanderduene/wireguard-privkey.age".publicKeys                    = [ leah wanderduene ];
   "wanderduene/restic-server-htpasswd.age".publicKeys               = [ leah wanderduene ];
   "wanderduene/rclone-config.age".publicKeys                        = [ leah wanderduene ];
diff --git a/secrets/wanderduene/syncthing/cert.age b/secrets/wanderduene/syncthing/cert.age
@@ -0,0 +1,27 @@
+-----BEGIN AGE ENCRYPTED FILE-----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+-----END AGE ENCRYPTED FILE-----
diff --git a/secrets/wanderduene/syncthing/key.age b/secrets/wanderduene/syncthing/key.age
@@ -0,0 +1,16 @@
+-----BEGIN AGE ENCRYPTED FILE-----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+-----END AGE ENCRYPTED FILE-----