{ conf, config, ...}: {

  sops.secrets."syncthing/key.pem" = {
    sopsFile = ../hosts/${conf.hostname}/secrets/default.yaml
  };
  sops.secrets."syncthing/cert.pem" = {
    sopsFile = ../hosts/${conf.hostname}/secrets/default.yaml
  };

  services.syncthing = {
    user = conf.user;
    dataDir = "$(conf.home)/sync";
    configDir = "$(conf.home)/.config/syncthing";

    overrideDevices = true;
    overrideFolders = true;

    settings = {
      key = config.sops.secrets."syncthing/key.pem".path;
      cert = config.sops.secrets."syncthing/cert.pem".path;
    
      devices = {
        "phone" = {id = "C2CKYRP-72UNJRX-MUPZIUY-CCHQYGF-6T4NA6B-MO7AEZB-RSN5EAG-CN2JCAF";};
        "nixserver" = {id = "DW6GTZ3-3JPAHLO-UEB3LBL-AWOX3BT-QPI7ODT-OZ6Q4YR-K3KK22C-5RY3XQZ";};
        "lilith-pc" = {id = "ZXFUFLA-MJJCNE4-SJTGTYD-SEJZUCX-3KIFTL6-LFIWBBU-HD2LX2F-7FQ5VAF";};
        "lilith-pad" = {id = "GQJA6WA-G5YZZSN-4OOQMVE-JPIR22N-VFHPY4O-XMRG37D-DALH4R2-7DCTMQK";};
        "lilith-old" = {id = "MSUZJ6K-4CIFE5D-ILO6FE4-SPRPTZI-VEWZQ7F-ECARCCF-2VLVMDQ-2HQUAAS";};
      };
      folders = {
        "rdcj2-mfyb4" = {
          path = "/home/spectre/sync";
          devices = ["phone" "nixserver" "lilith-pad" "lilith-pc"  "lilith-old"];
        };
        "sdpfs-2beqd" = {
          path = "/home/spectre/.keepass";
          devices = ["phone" "nixserver" "lilith-pad" "lilith-pc"  "lilith-old"];
        };
        "7qim7-yzqpn" = {
          path = "/home/spectre/obsidian";
          devices = ["phone" "nixserver" "lilith-pad" "lilith-pc"  "lilith-old"];
        };
      };
    };
  };
}