feat(syncthing): setup syncthing

configuration.nix

@@ -27,6 +27,7 @@ in
     (import ./sourcehut.nix { inherit base-domain; })
     (import ./paperless.nix { inherit base-domain lib; })
     (import ./mailserver.nix { inherit base-domain; })
+    (import ./syncthing.nix { inherit base-domain; })
 
     ./userprogs.nix
   ];

firewall.nix

@@ -1,8 +1,8 @@
 {
   networking.firewall = {
     enable = true;
-    allowedTCPPorts = [ 22 80 443 21 25 465 587 143 993 995 110 ];
-    allowedUDPPorts = [ 22 80 443 25 465 587 143 993 995 110 ];
+    allowedTCPPorts = [ 22 80 443 21 25 465 587 143 993 995 110 22000 ];
+    allowedUDPPorts = [ 22 80 443 25 465 587 143 993 995 110 22000 ];
     allowedTCPPortRanges = [
       # vsftpd passive
       {

nginx.nix

@@ -26,6 +26,13 @@
           proxyPass = "http://localhost:28981";
         };
       };
+      "syncthing.${base-domain}" = { 
+        enableACME = true;
+        forceSSL = true;
+        locations."/" = {
+          proxyPass = "http://syncthing.${base-domain}:8384";
+        };
+      };
     };
   };
 }

syncthing.nix

@@ -0,0 +1,10 @@
+{ base-domain, ... }:
+let
+  fqdn = "syncthing.${base-domain}:8384";
+in
+{
+  services.syncthing = {
+    enable = true;
+    guiAddress = fqdn;
+  };
+}