{ config, pkgs, lib, ... }:
{

  test.services.syncthing = {
    enable = true;
    openDefaultPorts = false;
    user = "palo";
    dataDir = "/home/palo/.syncthing";
    configDir = "/home/palo/.syncthing";
    declarative = {
      cert = toString <secrets/syncthing/cert.pem>;
      key = toString <secrets/syncthing/key.pem>;
      overrideFolders = true;
      folders = {

        # on encrypted drive
        # ------------------
        desktop.path = "/home/palo/desktop";
        finance.path = "/home/palo/finance";
        lost-fotos.path = "/home/palo/.lost-fotos.ct";

        # no need to be encrypted
        # -----------------------
        book.path = "/home/palo/books";
        fotos-encrypted.path = "/home/palo/private/.fotos.ct";
        music-library.path = "/home/palo/music-library";
        music-projects.path = "/home/palo/music-projects";

      };
    };
  };
}