2021-01-24 14:06:54 +00:00
|
|
|
{ config, pkgs, ... }: with import <stockholm/lib>;
|
|
|
|
|
{
|
|
|
|
|
imports = [ <stockholm/krebs/2configs/syncthing.nix> ];
|
2017-04-16 21:35:25 +00:00
|
|
|
services.syncthing = {
|
2019-04-07 16:44:57 +00:00
|
|
|
group = "syncthing";
|
2020-04-08 10:33:08 +00:00
|
|
|
declarative = {
|
|
|
|
|
key = toString <secrets/syncthing.key>;
|
|
|
|
|
cert = toString <secrets/syncthing.cert>;
|
|
|
|
|
};
|
2017-04-16 21:35:25 +00:00
|
|
|
};
|
|
|
|
|
krebs.iptables.tables.filter.INPUT.rules = [
|
|
|
|
|
{ predicate = "-p tcp --dport 22000"; target = "ACCEPT";}
|
|
|
|
|
{ predicate = "-p udp --dport 21027"; target = "ACCEPT";}
|
|
|
|
|
];
|
2019-04-07 16:44:57 +00:00
|
|
|
|
|
|
|
|
system.activationScripts.syncthing-home = ''
|
|
|
|
|
${pkgs.coreutils}/bin/chmod a+x /home/lass
|
|
|
|
|
'';
|
|
|
|
|
|
2021-01-23 17:20:52 +00:00
|
|
|
boot.kernel.sysctl."fs.inotify.max_user_watches" = 524288;
|
2017-04-16 21:35:25 +00:00
|
|
|
}
|
