From 7eca7beb01d355ef98bd69baf8e22b3c73a5434f Mon Sep 17 00:00:00 2001
From: Nick <nickjhiebert@proton.me>
Date: Tue, 9 Dec 2025 16:34:38 -0600
Subject: [PATCH] fix: syncthing cucked

---
 modules/nixos/homelab/guests/syncthing/config/default.nix | 8 ++++++++
 secrets/secrets.yaml                                      | 6 ++++--
 2 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/modules/nixos/homelab/guests/syncthing/config/default.nix b/modules/nixos/homelab/guests/syncthing/config/default.nix
index 85abad5..eecdb76 100755
--- a/modules/nixos/homelab/guests/syncthing/config/default.nix
+++ b/modules/nixos/homelab/guests/syncthing/config/default.nix
@@ -39,6 +39,7 @@ in
                 openDefaultPorts = true;
                 systemService = true;
                 guiAddress = "0.0.0.0:${toString serviceCfg.ports.port0}";
+                guiPasswordFile = "/run/secrets/${user}-pass";
                 settings = {
                   folders = folders;
                   devices = devices;
@@ -146,5 +147,12 @@ in
         "d ${mnt}/${serviceCfg.name} 0751 microvm wheel - -"
       ]
       ++ tmpOut;
+      sops.secrets = {
+        "${serviceCfg.name}/${user}-pass" = {
+          owner = "root";
+          mode = "0600";
+        };
+      };
+
     };
 }
diff --git a/secrets/secrets.yaml b/secrets/secrets.yaml
index 89763f8..d4511a0 100755
--- a/secrets/secrets.yaml
+++ b/secrets/secrets.yaml
@@ -74,6 +74,8 @@ photoprism:
     nick-pass: ENC[AES256_GCM,data:2anC3qkrE6Z3NwMWSi5dVQ7C5Q2ym6cYCL/yXQUPAYJ3,iv:7ZVwkhQZ5MjHeobp0ACvY29h5wXA4Cq6Bsf2jnx/ZEE=,tag:+234QVuKo7yfOh3jo8HImQ==,type:str]
     stacie-pass: ENC[AES256_GCM,data:45nwjOXOI2wYPi7H2RtUVMESCxLTYQrF4600MQHoCDwm,iv:WgYqJjbIO8fzU/z19RsiUpIbWQmyT4iU4yAFIj1fcsU=,tag:jzsYNrerq6syemssOOOwTg==,type:str]
     garnet-pass: ENC[AES256_GCM,data:ccb7NJxYZxXeuiHxn6ntssTmnN9AoaqoFe8pFkPLNgLm,iv:yeTPsn01pVuWp5qVaFl1dWCoMYX6koBKN5ehJgCSix4=,tag:Pd2erGL2hBQnN5JZNBPo5A==,type:str]
+syncthing:
+    nick-pass: ENC[AES256_GCM,data:1GBRck3M9E9x1vJs8iHMF5IHVEwozrZ2Kon6MOx7MjwK,iv:4FfSlWDH4klRXvKU19w/iI233v0OudkLxsT16fYi4GU=,tag:MVOX7+Z+BRIxaiO/Rl+sMQ==,type:str]
 listenbrainz-token: ENC[AES256_GCM,data:rSLVOYj4PbWII+CQa3VzK36Tns5PTr6wwE9ARlGwt7h5HAf7,iv:GXpJlchq1B/jTjvn5EWrZ3pnCZgGcDNHEYA2+yESUsc=,tag:im6e/xqQMgbKPt9ey3l2TA==,type:str]
 sops:
     age:
@@ -86,7 +88,7 @@ sops:
             bXBOa1VSakoyaWxpODJEOU11QUZCaUEK8Ch9Ten3DdrPHF1DTH2qei85AlHUOaLD
             aNfzakake7ej+MxJYdKEU0bcWofNMKzIlZa2uM10KZSENDP8d8qlig==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-12-09T03:06:03Z"
-    mac: ENC[AES256_GCM,data:DaIgPYNrO+owd4978mmvFcLvEoyeAiAo25II2uNmElFCsdcV+1x7N60Vpv6V7eMWYzxdeP2oQllz4GMsJcio8dQtQFEMK9m0uzk+LGftpZSraMMMf1UEounTD6NUS6YfaClvihUCnYIjD9DjF36TIL1mYjPtUNM2RXuksBeib8I=,iv:FdznQqiVBnYqojlj5/sgHshldNhcMWjyUZm5HuT6EMU=,tag:pVigh+nYjqOYE6OxS86qig==,type:str]
+    lastmodified: "2025-12-09T22:33:37Z"
+    mac: ENC[AES256_GCM,data:nMOflva5Y8/ARjuQJi3xxrlHE9gPWrBsEVPlV/hRAHOT96DjeQwotlOXSVHKQA5oTdX9tyBhlCtAV+FXWlE9+X/SDNJ1McKOPRNyg63iroMDzO0U6o56yWD7mETdv2H+mrSqJMPXibwRyeWtRMXeFc2paay1C87gSaY7cxa5HT8=,iv:MmxVhxWO3HnLSU4DHERWYdnRTRfKFkTPPgK834oF6Uk=,tag:+MaLPsgjm07kyseF9Hgy9A==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.11.0