vno1-gdrx: +syncthing

flake.nix

@@ -203,8 +203,8 @@
                 root-passwd-hash.file = ./secrets/root_passwd_hash.age;
                 sasl-passwd.file = ./secrets/postfix_sasl_passwd.age;
 
-                #syncthing-key.file = ./secrets/mtworx/syncthing/key.pem.age;
-                #syncthing-cert.file = ./secrets/mtworx/syncthing/cert.pem.age;
+                syncthing-key.file = ./secrets/vno1-gdrx/syncthing/key.pem.age;
+                syncthing-cert.file = ./secrets/vno1-gdrx/syncthing/cert.pem.age;
               };
             }
           ];

hosts/vno1-gdrx/configuration.nix

@@ -66,11 +66,19 @@ in
 
     services = {
       sshguard.enable = false;
+
       tailscale = {
         enable = true;
         verboseLogs = true;
       };
 
+      syncthing = {
+        enable = true;
+        dataDir = "/home/motiejus/";
+        user = "motiejus";
+        group = "users";
+      };
+
       #btrfssnapshot = {
       #  enable = true;
       #  subvolumes = [

modules/services/syncthing/default.nix

@@ -14,6 +14,7 @@ let
     "rzj-744P2PE".id = "UW6ISH2-NW6X6AW-BJR76TV-TV3BIGZ-PA5QH2M-YEF567T-IWMHKD5-P3XHHAH";
     "sqq1-desk".id = "WJ5KGRS-AGDZ7SW-INIVWHR-Q4E5QX4-Y4TT2AK-QRJTOTL-2UHXX6O-5MUPGA2";
     "vno1-vinc".id = "4W3S7R2-OWI6XO6-V4NMDNB-NTIETYP-QJSBQGA-WEIXPHR-WNZZ7R4-VT4COAR";
+    "vno1-gdrx".id = "XOZO6GL-MEH55QR-PTNRVHE-45PD3L2-SHP7XW6-VXKROQ5-F47U3AX-QQACLQP";
     "vno2-irena".id = "VL2MA2E-ZDGVHYN-A3Q3EKU-7J625QM-FG7CNXY-UKDL563-MDRRIEG-XQDS3AW";
     "v-kfire".id = "REEDZAL-KPLWARZ-466J4BR-H5UDI6D-UUA33QG-HPZHIMX-WNFLDGD-PJLTFQZ";
     "a-kfire".id = "VIQF4QW-2OLBBIK-XWOIO4A-264J32R-BE4J4BT-WEJXMYO-MXQDQHD-SJ6MEQ7";
@@ -21,6 +22,7 @@ let
   folders = {
     Books = {
       devices = [
+        "vno1-gdrx"
         "fwminex"
         "mxp10"
       ];
@@ -28,12 +30,16 @@ let
       label = "Books";
     };
     Mail = {
-      devices = [ "fwminex" ];
+      devices = [
+        "vno1-gdrx"
+        "fwminex"
+      ];
       id = "66fmz-x6f1a";
       label = "Mail";
     };
     M-Active = {
       devices = [
+        "vno1-gdrx"
         "mxp10"
         "fwminex"
         "mtworx"
@@ -49,7 +55,10 @@ let
       };
     };
     M-Documents = {
-      devices = [ "fwminex" ];
+      devices = [
+        "vno1-gdrx"
+        "fwminex"
+      ];
       id = "4fu7z-z6es2";
       label = "M-Documents";
     };
@@ -57,6 +66,7 @@ let
       devices = [
         "vno1-vinc"
         "sqq1-desk"
+        "vno1-gdrx"
         "fwminex"
         "mtworx"
         "v-kfire"
@@ -70,6 +80,7 @@ let
     M-Camera = {
       devices = [
         "mxp10"
+        "vno1-gdrx"
         "fwminex"
         "mtworx"
       ];
@@ -82,12 +93,16 @@ let
       label = "R-Documents";
     };
     Pictures = {
-      devices = [ "fwminex" ];
+      devices = [
+        "vno1-gdrx"
+        "fwminex"
+      ];
       id = "d3hur-cbzyw";
       label = "Pictures";
     };
     Music = {
       devices = [
+        "vno1-gdrx"
         "fwminex"
         "mtworx"
         "mxp10"
@@ -97,6 +112,7 @@ let
     };
     video-shared = {
       devices = [
+        "vno1-gdrx"
         "mxp10"
         "mtworx"
         "fwminex"
@@ -105,12 +121,16 @@ let
       label = "video-shared";
     };
     stud-cache = {
-      devices = [ "fwminex" ];
+      devices = [
+        "vno1-gdrx"
+        "fwminex"
+      ];
       id = "2kq7n-jqzxj";
       label = "stud-cache";
     };
     M-R = {
       devices = [
+        "vno1-gdrx"
         "fwminex"
         "rzj-744P2PE"
         "mxp10"
@@ -127,6 +147,11 @@ let
       id = "wuwai-qkcqj";
       label = "Irenos";
     };
+    www-vno1-gdrx = {
+      devices = [ "vno1-gdrx" ];
+      id = "7z7ao-3hbxi";
+      label = "www-vno1-gdrx";
+    };
     www-fwminex = {
       devices = [ "fwminex" ];
       id = "7z9sw-2nubh";
@@ -179,8 +204,23 @@ in
       settings = {
         devices =
           { }
+          // (lib.optionalAttrs (config.networking.hostName == "vno1-gdrx") {
+            inherit (devices)
+              vno1-gdrx
+              fwminex
+              mtworx
+              mxp10
+              rzj-744P2PE
+              sqq1-desk
+              vno1-vinc
+              vno2-irena
+              v-kfire
+              a-kfire
+              ;
+          })
           // (lib.optionalAttrs (config.networking.hostName == "fwminex") {
             inherit (devices)
+              vno1-gdrx
               fwminex
               mtworx
               mxp10
@@ -194,6 +234,7 @@ in
           })
           // (lib.optionalAttrs (config.networking.hostName == "mtworx") {
             inherit (devices)
+              vno1-gdrx
               mtworx
               fwminex
               vno1-vinc
@@ -235,6 +276,20 @@ in
             "${cfg.dataDir}/Video" = video-shared;
             "${cfg.dataDir}/music" = Music;
             "${cfg.dataDir}/www" = www-mtworx;
+          })
+          // (lib.optionalAttrs (config.networking.hostName == "vno1-gdrx") {
+            "${cfg.dataDir}/Books" = Books;
+            "${cfg.dataDir}/Mail" = Mail;
+            "${cfg.dataDir}/M-Active" = M-Active;
+            "${cfg.dataDir}/M-Camera" = M-Camera;
+            "${cfg.dataDir}/M-Documents" = M-Documents;
+            "${cfg.dataDir}/Pictures" = Pictures;
+            "${cfg.dataDir}/M-R" = M-R;
+            "${cfg.dataDir}/stud-cache" = stud-cache;
+            "${cfg.dataDir}/video/shared" = video-shared;
+            "${cfg.dataDir}/video/Vaikai" = Vaikai;
+            "${cfg.dataDir}/music" = Music;
+            "${cfg.dataDir}/www" = www-vno1-gdrx;
           });
       };
     };

secrets.nix

@@ -38,6 +38,10 @@ in
   "secrets/mtworx/syncthing/key.pem.age"
   "secrets/mtworx/syncthing/cert.pem.age"
 ]
+// mk ([ vno1-gdrx ] ++ motiejus) [
+  "secrets/vno1-gdrx/syncthing/key.pem.age"
+  "secrets/vno1-gdrx/syncthing/cert.pem.age"
+]
 // mk ([ fwminex ] ++ motiejus) [
   "secrets/motiejus_server_passwd_hash.age"
   "secrets/root_server_passwd_hash.age"

secrets/vno1-gdrx/syncthing/cert.pem.age

@@ -0,0 +1,16 @@
+age-encryption.org/v1
+-> ssh-ed25519 lDWJbA qd8pCtAkTVE/GeUes2de1g1aUsYhwu1irvUl+vBW4V8
+Hp09L0sWIMnGU7+vTQ3nK+eWPICmwnFcv4PAae/UGu4
+-> X25519 XTt+hV/Amhe84t0Klb8tPHmlMNriOt/GyLEed8cS/Uo
+nkJ9nUAFOBCMnDT//EOw/Fw3Reyp07QXW9cTt9bSWZE
+-> X25519 8k2/ghGi/a5rCh9RI9YvEpOnyMm8UC4WJJuYVQV0jUs
+OvPJPwLzhAiPDDnCDDkOEjuVMEgW94/BZHZA7YoFrB4
+-> piv-p256 +y2G/w AtumpdI8OtBy0KZlmQPXIa2uUoLo0z6nZOHmm+qDQi9P
+/3fzNyESI1D+0QwLlu+kPqPOqTPIiD9gRe3lAjksjRo
+-> piv-p256 jNqd3A Aqx0y3TaULqvMGecH971t3rrgoUP3/v1m054UMHv1Hco
+tJjFn60OQawyIyDqNGpSKFjpgdBhB3S6Ry/rEGXWGjo
+--- vvu+ME266bC882uH9jopi+YekAHa+SzC/WmTvifEfMc
+<EFBFBD><EFBFBD><15>
+ѣ5<EFBFBD>h_<EFBFBD><EFBFBD>K<>~<7E><>`<60><>_<EFBFBD><5F>X<EFBFBD><58>p<EFBFBD>@n<>
+<EFBFBD><EFBFBD><EFBFBD>pH<><48>:<3A>O|<7C>-1<><31>ɑ<EFBFBD>O<EFBFBD>s/<2F>)<1F><><EFBFBD>'ҳ<><0F>;GhD&H<>y<EFBFBD>/4Ct<07>,<2C>_P<5F><0E><02><>)<29><>V<EFBFBD>Fާ<46>M<EFBFBD><4D>s><3E>d<EFBFBD><64><EFBFBD><EFBFBD>%<25>T<16>f<EFBFBD><66><EFBFBD><EFBFBD><EFBFBD>e><08><><EFBFBD>/ؠbT<62><54><EFBFBD>//<2F>ˀx<><78><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>HȄLz<4C>0<EFBFBD>
Բ1<D4B2><31>H/c<>S<EFBFBD><53><EFBFBD>J<12>06<30><36>4Q{P<><50>L
<01>GN3
<01>@<40>2"<22>麁<EFBFBD>
+<EFBFBD><EFBFBD>aU<61>iՆ<69><1D>w<EFBFBD>aD	.F<><46>B<EFBFBD>6ݎ#<23>;<3B><19>f*)