add torus syncthing

provision/hosts/bulwark/configuration.nix

@@ -41,6 +41,7 @@
         certPath = ../../secrets/syncthing/bulwark/cert.pem.age;
         devices = {
           "kestrel" = { id = "5WWL4FE-ARZ4FHP-J33HQCH-CZKEXLN-2RAY4KW-PDI754F-3HVPZYI-VC3ESAF"; };
+          "torus" = { id = "ZVABUCA-3SA5QKR-OZSCIS5-RDAHR2V-D4R4NFK-ZBYOKDP-6HQUG2M-BNL3DAO"; };
         };
       };
     };

provision/hosts/kestrel/configuration.nix

@@ -63,6 +63,7 @@
         certPath = ../../secrets/syncthing/kestrel/cert.pem.age;
         devices = {
           "bulwark" = { id = "YKPOWTQ-XMXG3SD-XKLPVEC-H4SO345-2ZZQK65-EBISRED-ISKCFMQ-T74P6Q5"; };
+          "torus" = { id = "ZVABUCA-3SA5QKR-OZSCIS5-RDAHR2V-D4R4NFK-ZBYOKDP-6HQUG2M-BNL3DAO"; };
         };
       };
     };

provision/hosts/torus/configuration.nix

@@ -102,6 +102,15 @@
     };
     services = {
       ssh.enable = true;
+      syncthing = {
+        enable = true;
+        keyPath = ../../secrets/syncthing/torus/key.pem.age;
+        certPath = ../../secrets/syncthing/torus/cert.pem.age;
+        devices = {
+          "bulwark" = { id = "YKPOWTQ-XMXG3SD-XKLPVEC-H4SO345-2ZZQK65-EBISRED-ISKCFMQ-T74P6Q5"; };
+          "kestrel" = { id = "5WWL4FE-ARZ4FHP-J33HQCH-CZKEXLN-2RAY4KW-PDI754F-3HVPZYI-VC3ESAF"; };
+        };
+      };
     };
   };
 }

provision/secrets/secrets.nix

@@ -24,5 +24,7 @@ in
   "syncthing/kestrel/cert.pem.age".publicKeys = systems;
   "syncthing/bulwark/key.pem.age".publicKeys = systems;
   "syncthing/bulwark/cert.pem.age".publicKeys = systems;
+  "syncthing/torus/key.pem.age".publicKeys = systems;
+  "syncthing/torus/cert.pem.age".publicKeys = systems;
 }