patch syncthig config a bit :p

configuration.nix

@@ -56,6 +56,7 @@
     defaults.email = "zedddie@protonmail.com";
   };
 
+  services.fail2ban.enable = true;
   services.nginx.enable = true;
   security.acme.certs."zedddie.rs".group = "acme";
   users.users.nginx.extraGroups = [ "acme" ];
@@ -165,23 +166,36 @@
     dataDir = "/home/vps/syncthing/";
     configDir = "/home/vps/syncthing/.config/syncthing";
     openDefaultPorts = true;
-    settings.gui = {
-      user = "zedddie";
-    };
     guiPasswordFile = "/home/vps/really-secret-syncthing-gui-password";
+    overrideDevices = true;
+    overrideFolders = true;
+    settings = {
+    gui.user = "zedddie";
     devices = {
-      "pcnix" = {
-        id = "XLPXMR6-BPNSD5I-VTEFYCC-HBKTD3B-ZQC5M72-4QFSWPD-GW333PJ-KL5W7AK";
-      };
-    };
+      "pcnix" = { id = "XLPXMR6-BPNSD5I-VTEFYCC-HBKTD3B-ZQC5M72-4QFSWPD-GW333PJ-KL5W7AK"; };
+      "nas" = { id = "2CJHVIW-KDRSXAV-IA2UNK7-PA6YWCT-INE46KL-YO5SJWQ-YOBCTQF-OJCYNQD"; };
+    };#devices
     folders = {
       "passwds" = {
         path = "/home/vps/syncthing/secure_vault/";
-        devices = [ "pcnix" ];
-      };
-    };
+        devices = [
+          "pcnix"
+          "nas"
+        ];
+        type = "receiveonly";
+        versioning = {
+          type = "staggered"; #
+          params = {
+            cleanInterval = "3600"; # cleanup every hour
+            maxAge = "31560000"; # 1 year maxage
+          };#params
+        }; #versioning
+  }; #passwds
+}; #folders
+
+  };#settings
+ };#syncthing
 
-  };
   environment.shellAliases = {
     zix = ''nix run "git+https://codeberg.org/zedddie/zix" --extra-experimental-features "nix-command flakes" --'';
   };