{config, ...}: {
  services.syncthing.enable = true;

  sops.secrets = {
    "syncthing/key".path = "${config.xdg.configHome}/syncthing/key.pem";
    "syncthing/cert".path = "${config.xdg.configHome}/syncthing/cert.pem";
  };
}