From f8d9f95ff09e486da5cd5f6668699ef27ad0f8bf Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Motiejus=20Jak=C5=A1tys?= <motiejus@jakstys.lt>
Date: Thu, 25 Jan 2024 12:15:59 +0200
Subject: [PATCH] add syncthing-relay

---
 hosts/vno1-oh2/configuration.nix | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/hosts/vno1-oh2/configuration.nix b/hosts/vno1-oh2/configuration.nix
index a1d9bb2..5d8f3f3 100644
--- a/hosts/vno1-oh2/configuration.nix
+++ b/hosts/vno1-oh2/configuration.nix
@@ -562,6 +562,11 @@
         inotify = "yes";
       };
     };
+
+    syncthing.relay = {
+      enable = true;
+      providedBy = "11sync.net";
+    };
   };
 
   systemd.services = {
@@ -702,7 +707,13 @@
     ];
     firewall = {
       allowedUDPPorts = [53 80 443];
-      allowedTCPPorts = [53 80 443];
+      allowedTCPPorts = [
+        53
+        80
+        443
+        config.services.syncthing.relay.port
+        config.services.syncthing.relay.statusPort
+      ];
       rejectPackets = true;
     };
   };