From 299bf4ea8529dacae3e8676ecb2607579c7f09ef Mon Sep 17 00:00:00 2001
From: Romain Paquet <rpqt@rpqt.fr>
Date: Sat, 29 Nov 2025 14:11:50 +0100
Subject: [PATCH] genepi: add password for synchthing-gui

---
 machines/genepi/syncthing.nix | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/machines/genepi/syncthing.nix b/machines/genepi/syncthing.nix
index d554fe0..dd72177 100644
--- a/machines/genepi/syncthing.nix
+++ b/machines/genepi/syncthing.nix
@@ -23,5 +23,17 @@ in
     group = lib.mkForce "users";
     dataDir = home;
     configDir = lib.mkForce "${home}/.config/syncthing";
+    guiPasswordFile = config.clan.core.vars.generators.syncthing-gui.files.password.path;
+  };
+
+  clan.core.vars.generators.syncthing-gui = {
+    files.password = {
+      secret = true;
+      owner = user;
+    };
+    runtimeInputs = [ pkgs.xkcdpass ];
+    script = ''
+      xkcdpass -n 7 > $out/password
+    '';
   };
 }