{ config, ... }:
{
  services.syncthing.enable = true;
  services.syncthing.guiAddress = "0.0.0.0:8384";
  security.acme.certs."${config.domainName}".extraDomainNames = [ "syncthing.${config.domainName}" ];
  services.nginx.virtualHosts."syncthing.${config.domainName}" = {
    useACMEHost = config.domainName;
    addSSL = true;
    locations."/".proxyPass = "http://localhost:8384";
  };
}