{
  # TODO: when deploying this to a new machine for the first time, first
  # comment this out to get /data/sync created with the right owner and
  # permissions. then, do it again with persistence enabled.
  # This could list the owner user but I'm not sure if it's already created at
  # the time impermanence setup runs.
  environment.persistence."/persist".directories = [
    "/data/sync"
  ];

  services.syncthing = {
    enable = true;
    dataDir = "/data/sync";
    openDefaultPorts = true;
    #guiAddress = "0.0.0.0:8384";
    overrideDevices = true;
    overrideFolders = true;
    settings = {
      devices = {
        "c1" = { id = "53JGRHQ-VGBYIGH-7IT6Z5S-3IMRY2I-LJZAE3B-QUDH3QF-4F4QKVC-VBWPJQ4"; };
        "c2" = { id = "Z3D476N-PUV6WAD-DSJWVBO-TWEOD4I-KDDMNRB-QEBOP6T-BYPGYTX-RAAYGAW"; };
        "c3" = { id = "JUQZO6M-65VXR5Y-ZDWY66F-F2EEMQC-HKMD6EB-33TAGPY-ADCB2OX-QT6IAAQ"; };
        "zippy" = { id = "WXDYZWN-JG2OBQH-CC42RMM-LPJGTS6-Y2BV37J-TYSLHL4-VHGYL5M-URI42QJ"; };
      };
      folders = {
        "wordpress" = {
          path = "/data/sync/wordpress";
          devices = [
            "c1"
            "c2"
            "c3"
            "zippy"
          ];
          ignorePerms = false;
          versioning = {
            type = "staggered";
            params = {
              cleanInterval = "3600";
              maxAge = "15768000";
            };
          };
        };
      };
    };
  };
}