From bce366abdc333a79750ff084a56854a57dda24f4 Mon Sep 17 00:00:00 2001
From: janis <janis@nirgendwo.xyz>
Date: Wed, 3 Sep 2025 17:18:15 +0200
Subject: [PATCH] syncthing?

---
 home/default.nix   |  1 +
 home/syncthing.nix | 41 +++++++++++++++++++++++++++++++++++++++++
 system/default.nix | 11 ++++++++++-
 3 files changed, 52 insertions(+), 1 deletion(-)
 create mode 100644 home/syncthing.nix

diff --git a/home/default.nix b/home/default.nix
index 9a70047..ab362e4 100644
--- a/home/default.nix
+++ b/home/default.nix
@@ -16,6 +16,7 @@ in {
     ./libinput.nix
     ./git-ssh.nix
     ./emacs.nix
+    ./syncthing.nix
     ./development
   ];
 
diff --git a/home/syncthing.nix b/home/syncthing.nix
new file mode 100644
index 0000000..0a10d10
--- /dev/null
+++ b/home/syncthing.nix
@@ -0,0 +1,41 @@
+{pkgs, ...}:
+let
+  user = import ../data/user.nix {};
+in {
+  services.syncthing = {
+    enable = true;
+    tray.enable = true;
+
+    guiAddress = "0.0.0.0:8384";
+
+    settings = {
+      gui = {
+        user = "admin";
+        password = "strongpassword";
+      };
+
+      devices = {
+        # "laptop" = {
+        #   name = "laptop";
+        #   id = "LAPTOPDEVICEID";
+        # };
+        "desktop" = {
+          name = "desktop";
+          id = "HQ6L2IU-V7YKP4H-NVKMCAQ-6PZ37SJ-ETTXY7Y-2PBH62A-5AJAGPN-OUT3YQW";
+        };
+        "nirgendwo" = {
+          name = "nirgendwo";
+          id = "UNHUVZP-7HO7R6J-EKSG2QT-CLCFQ7E-GD7AKA7-TMNZT3E-6M56VPS-AGDE5AA";
+        };
+      };
+
+      folders = {
+        "Shared" = {
+          id = "539nt-oefmc";
+          path = "~/Shared";
+          devices = [ "nirgendwo" "desktop" ];
+          };
+        };
+    };
+  };
+}
diff --git a/system/default.nix b/system/default.nix
index f726f63..d843d0d 100644
--- a/system/default.nix
+++ b/system/default.nix
@@ -98,7 +98,16 @@
         };
       };
     };
-    firewall.enable = false;
+    firewall = {
+      enable = true;
+      # ssh: 22 TCP
+      # cups: 631 TCP
+      # syncthing:
+      # 22000 TCP and/or UDP for sync traffic
+      # 21027/UDP for discovery
+      allowedTCPPorts = [ 22 22000 631 ];
+      allowedUDPPorts = [ 22000 21027 ];
+    };
   };
 
   time.timeZone = "Europe/Amsterdam";