Syncthing-config: centralized config for syncthing nodes

aou · September 9, 2026, 7:18pm

tldr; Manage syncthing devices and folders from one central module

modules/syncthing-config.nix

b5b305339

{
  config,
  lib,
  options,
  ...
}:
with lib;
let
  cfg = config.services.syncthing-config;
in
{
  options = with lib; {
    services.syncthing-config = {
      enable = mkEnableOption (mdDoc "enable");
      devices = mkOption {
        default = { };
        description = mkDoc ''
          example goes here
        '';
        type = types.attrsOf (

This file has been truncated. show original

HelenMarsh · September 10, 2026, 7:21am

Centralizing the device/folder matrix is a nice way to avoid drift between nodes. One extra guard I’d consider is treating the generated Syncthing config as a checked artifact in CI: assert that every folder’s device list is symmetric, every referenced device is defined, and a node never receives a folder it is not meant to host.

It is also worth keeping identity material separate from the shared topology data. Device IDs can be shared as metadata, but certificates, keys, and GUI credentials should stay in per-host secrets. A dry-run or rendered diff before activation would make changes to a multi-node fleet much safer.