{ config, lib, pkgs, factsGenerator, ... }:
with lib; {

  networking.firewall.interfaces."gummybears".allowedTCPPorts = [ 8384 ];

  clanCore.facts.services.syncthing = factsGenerator.syncthing { };

  services.syncthing = {
    #guiAddress = lib.mkDefault "${config.networking.hostName}.${ config.clan.static-hosts.topLevelDomain }:8384";
    guiAddress = lib.mkDefault "${config.networking.hostName}.private:8384";
    overrideDevices = lib.mkDefault true;
    key = config.clanCore.facts.services.syncthing.secret."syncthing.key".path;
    cert = config.clanCore.facts.services.syncthing.secret."syncthing.cert".path;
    settings.devices =
      let
        machineDir = "${config.clanCore.clanDir}/machines";
        syncthingPub = machine:
          lib.removeSuffix "\n"
            (builtins.readFile "${machineDir}/${machine}/facts/syncthing.pub");
        zerotierIp = machine: (builtins.readFile "${machineDir}/${machine}/facts/zerotier-ip");

        clanDevice = machine: {
          "${machine}" = {
            name = machine;
            id = syncthingPub machine;
            addresses = [ "tcp://[${zerotierIp machine}]:22000" ];
          };
        };
        tincDevice = machine: {
          "${machine}" = {
            name = machine;
            id = syncthingPub machine;
            addresses = [ "tcp://${machine}.private:22000" ];
          };
        };
        device = machine: id: {
          "${machine}" = {
            name = machine;
            id = id;
            #addresses = [ "tcp://${machine}.private:22000" ];
          };
        };
      in
      { }

      // (tincDevice "orbi")
      // (tincDevice "cream")
      // (tincDevice "cherry")
      // (tincDevice "chungus")

      #// (device "mobi" )
      #// (device "bobi" )

      // (device "iPhone" "APFS6SA-VVTARXU-3WHHRZG-TE5N3T4-X4IC76V-T67EKZ6-NLGP3TW-EZYXYAH")
      // (device "iPad" "JDDNVYD-H3WMSSS-WZ745KL-7QEGN6O-ZSGQLQU-YBR2L42-7FO7KJ4-BXPYDA5")
      // (device "bumba" "JS7PWTO-VKFGBUP-GNFLSWP-MGFJ2KH-HLO2LKW-V3RPCR6-PCB5SQC-42FCKQZ")
    ;

    settings.folders = {

      # needs to be on encrypted drives
      # -------------------------------
      audiobooks = {
        enable = lib.mkDefault false;
        path = lib.mkDefault "/tmp/audiobooks";
        devices = [ "chungus" "orbi" ];
      };
      books = {
        enable = lib.mkDefault false;
        path = lib.mkDefault "/tmp/books";
        devices = [ "chungus" "cream" "cherry" ];
        versioning = {
          type = "simple";
          params.keep = "2";
        };
      };
      desktop = {
        enable = lib.mkDefault false;
        path = lib.mkDefault "/tmp/desktop";
        devices = [ "chungus" "cream" "cherry" ];
      };
      finance = {
        enable = lib.mkDefault false;
        path = lib.mkDefault "/tmp/finance";
        devices = [ "chungus" "cream" "cherry" ];
        versioning = {
          type = "simple";
          params.keep = "10";
        };
      };
      flix = {
        enable = lib.mkDefault false;
        path = lib.mkDefault "/tmp/flix";
        devices = [ "chungus" "orbi" ];
      };
      logseq = {
        enable = lib.mkDefault false;
        path = lib.mkDefault "/tmp/logseq";
        devices = [ "chungus" "cream" "cherry" "iPhone" "iPad" ];
      };
      lectures = {
        enable = lib.mkDefault false;
        path = lib.mkDefault "/tmp/lectures";
        devices = [ "chungus" "orbi" ];
      };
      oscar_cpap = {
        enable = lib.mkDefault false;
        path = lib.mkDefault "/tmp/oscar_cpap";
        devices = [ "chungus" "cream" "cherry" ];
      };
      password-store = {
        enable = lib.mkDefault false;
        path = lib.mkDefault "/tmp/password-store";
        devices = [ "chungus" "cream" "cherry" ];
        versioning = {
          type = "simple";
          params.keep = "10";
        };
      };
      # todo remove if zfs is is used
      #nextcloud_backup = {
      #  enable = lib.mkDefault false;
      #  path = lib.mkDefault "/tmp/lost-fotos";
      #  devices = [ "chungus"  ];
      #  versioning = {
      #    type = "simple";
      #    params.keep = "2";
      #  };
      #};
    };
  };

}