stockholm/lass/2configs/syncthing.nix

31 lines
938 B
Nix
Raw Normal View History

2017-04-16 21:35:25 +00:00
{ config, pkgs, ... }:
with import <stockholm/lib>;
{
services.syncthing = {
enable = true;
2019-04-07 16:44:57 +00:00
group = "syncthing";
configDir = "/var/lib/syncthing";
2017-04-16 21:35:25 +00:00
};
krebs.iptables.tables.filter.INPUT.rules = [
{ predicate = "-p tcp --dport 22000"; target = "ACCEPT";}
{ predicate = "-p udp --dport 21027"; target = "ACCEPT";}
];
2019-03-22 07:07:04 +00:00
krebs.syncthing = {
enable = true;
cert = toString <secrets/syncthing.cert>;
key = toString <secrets/syncthing.key>;
peers = mapAttrs (n: v: { id = v.syncthing.id; }) (filterAttrs (n: v: v.syncthing.id != null) config.krebs.hosts);
folders = [
2019-04-07 16:44:57 +00:00
{ path = "/home/lass/sync"; peers = [ "icarus" "mors" "skynet" "blue" "green" "littleT" "prism"]; }
2019-03-22 07:07:04 +00:00
];
};
2019-04-07 16:44:57 +00:00
system.activationScripts.syncthing-home = ''
${pkgs.coreutils}/bin/chmod a+x /home/lass
'';
lass.ensure-permissions = [
{ folder = "/home/lass/sync"; owner = "lass"; group = "syncthing"; }
];
2017-04-16 21:35:25 +00:00
}