syncthing

hosts/dunamis/configuration.nix

@@ -34,11 +34,6 @@
   networking = {
     networkmanager.enable = true;
     hostName = "dunamis";
-    # required for syncthing
-    firewall = {
-      allowedTCPPorts = [22000];
-      allowedUDPPorts = [21027 22000];
-    };
   };
 
   boot = {
@@ -66,6 +61,7 @@
     fstrim.enable = true;
     fwupd.enable = true;
     openssh.enable = true;
+    syncthing.openDefaultPorts = true;
     opensnitch = {
       enable = false;
       settings = {

hosts/dunamis/users.nix

@@ -15,7 +15,6 @@ in {
   users.users = {
     user = {
       hashedPasswordFile = sopSec."user-password-hashed".path;
-      # passwordFile = config.sops.secrets.user-password.path;
       isNormalUser = true;
       extraGroups = ["wheel" "video" "libvirtd" "dialout"];
       shell = pkgs.fish;
@@ -29,8 +28,9 @@ in {
       createHome = false;
       group = "remotebuild";
       openssh.authorizedKeys.keyFiles = [
+        "${secrets}/ssh/id_ed25519_sarien_user.pub"
+        "${secrets}/ssh/id_ed25519_eldrid_user.pub"
         "${secrets}/ssh/id_ed25519_eldrid_rmbuild.pub"
-        # "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJHPR1H7nWA2ay5PORdMJFnJcvVwpk3pTxMPJHQWSF3Z root@vylxae"
       ];
     };
   };

hosts/dunamis/users/user/programs.nix

@@ -9,6 +9,9 @@
 
   stylix.targets.fzf.enable = false;
   services.ssh-agent.enable = true;
+
+  syncthing.enable = true;
+
   programs = {
     bat.enable = true;
     btop = {