ctucx.git: nixfiles

machines/hector: add syncthing

diff --git a/configurations/common/syncthing-config.nix b/configurations/common/syncthing-config.nix
@@ -10,6 +10,10 @@ let
     iphone.id         = "3SM3LJV-XMHYW2D-MU5WQ3T-KGYUJOI-LXOL6YI-BSVZ2B5-QJ6GVXN-MPWMKQ7";
 
     #servers
+    hector = {
+      name = "hector.ctu.cx";
+      id   = "MVGBPSX-YSZNBDO-E7HZFGJ-WULYWQ5-XDHVMJO-BKA4R37-GPPRLLS-Z5DQMQJ";
+    };
     wanderduene = {
       name = "wanderduene.ctu.cx";
       id   = "WEFYARN-GY3WZXB-TIXBI56-ZZ77AHS-GFH5SH2-Q35NTBI-VPT3OEM-EQNAMQH";

diff --git a/machines/hector/default.nix b/machines/hector/default.nix
@@ -7,6 +7,8 @@
 
   imports = [
     ./hardware-configuration.nix
+
+    ./syncthing.nix
   ];
 
   dns.zones."ctu.cx".subdomains."${config.networking.hostName}" = (pkgs.dns.lib.combinators.host config.networking.primaryIP4 config.networking.primaryIP);

diff --git a/machines/hector/syncthing.nix b/machines/hector/syncthing.nix
@@ -0,0 +1,11 @@
+{ config, lib, pkgs, ... }:
+
+{
+
+  ctucxConfig.services.syncthing.enable = true;
+
+  services.syncthing = rec {
+    dataDir = "/home/katja/syncthing";
+  };
+
+}+
\ No newline at end of file

diff --git a/secrets/hector/syncthing/cert.age b/secrets/hector/syncthing/cert.age
@@ -0,0 +1,26 @@
+-----BEGIN AGE ENCRYPTED FILE-----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+-----END AGE ENCRYPTED FILE-----

diff --git a/secrets/hector/syncthing/key.age b/secrets/hector/syncthing/key.age
@@ -0,0 +1,17 @@
+-----BEGIN AGE ENCRYPTED FILE-----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+-----END AGE ENCRYPTED FILE-----

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
@@ -96,6 +96,10 @@ in {
   "wanderduene/syncthing/cert.age".publicKeys                       = [ main-key wanderduene ];
 
 
+  "hector/syncthing/key.age".publicKeys                             = [ main-key hector ];
+  "hector/syncthing/cert.age".publicKeys                            = [ main-key hector ];
+
+
   "wanderduene/wireguard-privkey.age".publicKeys                    = [ main-key wanderduene ];
   "wanderduene/restic-server-htpasswd.age".publicKeys               = [ main-key wanderduene ];
   "wanderduene/rclone-config.age".publicKeys                        = [ main-key wanderduene ];