nixos-config/configs/workhorse/syncthing.nix

{ config, pkgs, lib, ... }:
{

 test.services.syncthing = {
   enable = true;
   openDefaultPorts = false;
   dataDir = "/home/syncthing";
   configDir = "/home/syncthing";
   declarative = {
     cert = toString <secrets/syncthing/cert.pem>;
     key = toString <secrets/syncthing/key.pem>;
     overrideFolders = true;

     folders = {

       # todo add podcast here

       # on encrypted hard drive
       # -----------------------
       desktop = {
         enable = true;
         path = "/home/syncthing/desktop";
       };
       finance = {
         enable = true;
         path = "/home/syncthing/finance";
         versioning = {
           type = "simple";
           params.keep = "10";
         };
       };
        fotos = {
          enable = true;
          path = "/home/syncthing/fotos";
        };
       lost-fotos = {
         enable = true;
         path = "/home/syncthing/lost-fotos.ct";
       };
       music-projects = {
         enable = true;
         path = "/home/syncthing/music-projects";
       };
       video-material = {
         enable = true;
         path = "/home/syncthing/video-material";
       };

       # on media hard drive (not encrypted)
       # -----------------------------------
       music-library-free = {
         enable = true;
         path = "/media/syncthing/music-library-free";
       };
       samples = {
         enable = true;
         path = "/media/syncthing/samples";
       };
       movies = {
         enable = true;
         path = "/media/syncthing/movies";
       };
       music-library = {
         enable = true;
         path = "/media/syncthing/music-library";
       };
       podcasts = {
         enable = true;
         path = "/media/syncthing/podcasts";
       };
       series = {
         enable = true;
         path = "/media/syncthing/series";
       };

     };
   };
 };

  systemd.services."permown._media_syncthing" = {
    bindsTo = [ "media.mount" ];
    after = [ "media.mount" ];
  };
  system.permown."/media/syncthing" = {
    owner = "syncthing";
    group = "syncthing";
    umask = "0007";
  };
  systemd.services."syncthing" = {
    bindsTo = [ "media.mount" ];
    after = [ "media.mount" ];
  };

  backup.all.restic.dirs = ["/home/syncthing/finance"];

}