reorg + condiational secrets

hosts/syncthing.nix

@@ -1,61 +0,0 @@
-{ inputs, lib, config, pkgs, ... }:
-let
-  # cfg = config.modules.services.syncthing;
-  host = config.networking.hostName;
-  # Device IDs don't really need to be secret, but according to syncthing docs
-  # one can get the device IP if they know the device ID.
-  # devices = import ../../secrets/syncthing-devices.nix;
-  # FFS!! path concatenation in nix is a pain in the ass! see
-  # https://gist.github.com/CMCDragonkai/de84aece83f8521d087416fa21e34df4
-  # cert-text = builtins.readFile ("${config._secretstore}/hosts/" + "/${host}" + /syncthing/cert.pem);
-  # key-text = builtins.readFile ("${config._secretstore}/hosts/" + "/${host}" + /syncthing/key.pem);
-in {
-
-services.syncthing = {
-  enable = true;
-  dataDir = "/home/sstent";
-  # cert = "${pkgs.writeText "syncthing-cert.pem" cert-text}";
-  # key = "${pkgs.writeText "syncthing-key.pem" key-text}";
-  openDefaultPorts = true;
-  configDir = "/home/sstent/.config/syncthing";
-  user = "sstent";
-  group = "users";
-  guiAddress = "0.0.0.0:8385";
-    declarative = {
-    overrideDevices = true;
-    overrideFolders = true;
-    devices = {
-      "StuPC" = { id = "Z43MPGF-OKG6K34-WTTFUDO-UG6E3TE-YCLSOAT-5LN5KMW-QHL2VSK-EZCGCAP"; };
-      "Go3" = { id = "YDOL433-AHAL33M-NWLLDDQ-2D36ZIE-YNZVTKE-25TRBZ2-JXRSN7Y-Z5EOVQN"; };
-    };
-    folders = {
-      "default" = { 
-        path = "/home/sstent/sync"; 
-        devices = [ "StuPC" "Go3" ];  
-      };
-    };
-  };
-};
-
-}
-
-
-
-# { lib, pkgs, config, ... }:
-# with lib;
-
-# let cfg = config.services.ssh-proxy;
-# in {
-#   options.services.ssh-proxy = {
-#     enable = mkOption {
-#       type = types.bool;
-#       default = false;
-#       description = ''
-#         Enable Mnt Public for WSL
-#       '';
-#     };
-#   };
-
-#   config = mkIf cfg.enable {
-
-#   }