{ config, pkgs, inputs, ... }: {

  services.syncthing = {
    enable = true;
    dataDir = "/var/lib/syncthing-data";
    guiAddress = "0.0.0.0:8384";
    openDefaultPorts = true;
  };

  services.nginx.virtualHosts."syncthing.lelgenio.xyz" = {
    enableACME = true;
    forceSSL = true;
    locations."/" = {
      proxyPass = "http://127.0.0.1:8384";
      extraConfig =
        # required when the target is also TLS server with multiple hosts
        "proxy_ssl_server_name on;" +
        # required when the server wants to use HTTP Authentication
        "proxy_pass_header Authorization;"
      ;
    };
  };
}