{flake, ...}: let
  inherit (flake.config.machines.devices) nas phone tablet;
  inherit (flake.config.services.instances) syncthing web;
  service = syncthing;
  localhost = web.localhost.address0;
in {
  services = {
    syncthing = {
      enable = true;
      overrideDevices = false;
      overrideFolders = false;
      openDefaultPorts = true;
      systemService = true;
      guiAddress = "${localhost}:${toString service.ports.port0}";
      settings = {
        devices = {
          ${nas.name} = {
            autoAcceptFolders = true;
            name = nas.name;
            addresses = [
              "tcp://${nas.ip.address0}:${toString service.ports.port2}"
            ];
            id = nas.sync;
          };
          ${phone.name} = {
            autoAcceptFolders = true;
            name = phone.name;
            addresses = [
              "tcp://${phone.ip.address0}:${toString service.ports.port2}"
            ];
            id = phone.sync;
          };
          ${tablet.name} = {
            autoAcceptFolders = true;
            name = tablet.name;
            addresses = [
              "tcp://${tablet.ip.address0}:${toString service.ports.port2}"
            ];
            id = tablet.sync;
          };
        };
      };
    };
  };

  networking = {
    firewall = {
      allowedTCPPorts = [
        service.ports.port0
        service.ports.port1
        service.ports.port2
      ];
    };
  };
}