Setting up Resilio Sync on NixOS

configuration.nix

{ config, lib, pkgs, ... }:

let sharedDirectory = "/var/www/midlib";
in {
  # Network
  networking = {
    firewall.allowedTCPPorts = [ 4444 ]; # let connect directly to Resilio Sync
  };

  # System
  nixpkgs.config.allowUnfree = true; # required to install Resilio Sync

  # Services
  services.resilio = {
    enable = true;
    enableWebUI = false;
    checkForUpdates = false;
    downloadLimit = 0;
    uploadLimit = 0;
    deviceName = "a pretty name for other users";
    listeningPort = 4444;
  };

  systemd.tmpfiles.rules = [
    "d ${sharedDirectory} 0775 rslsync rslsync -" # create directory for Resilio Sync files
  ];

  services.resilio.sharedFolders = [{
    secret         = "the key"; # I want to make a mirror on the server, so the read-only key works perfectly
    directory      = sharedDirectory;
    knownHosts     = [];
    useRelayServer = true;
    useTracker     = true;
    useDHT         = true;
    searchLAN      = true;
    useSyncTrash   = true;
  }];
}