feat(sgx): add Syncthing support and configuration updates

Added Syncthing support with proxy and SSL in nginx and updated ACME certs configuration. Adjusted Syncthing GUI to bind to localhost for improved security.

systems/x86_64-linux/sgx/acme.nix

@@ -18,6 +18,7 @@
     };
     certs = {
       "openwebui.hoyer.world" = { };
+      "syncthing.hoyer.world" = { };
     };
   };
 }

systems/x86_64-linux/sgx/fileserver.nix

@@ -76,7 +76,7 @@
       user = "harald";
       dataDir = "/mnt/raid/Qmultimedia/syncthing"; # Default folder for new synced folders
       configDir = "/mnt/raid/Qmultimedia/syncthing/.config/syncthing"; # Folder for Syncthing's settings and keys
-      guiAddress = "0.0.0.0:8384";
+      guiAddress = "127.0.0.1:8384";
     };
   };
 }

systems/x86_64-linux/sgx/nginx.nix

@@ -30,6 +30,15 @@
           proxyWebsockets = true;
         };
       };
+      "syncthing.hoyer.world" = {
+        enableACME = false;
+        useACMEHost = "syncthing.hoyer.world";
+        forceSSL = true;
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:8384";
+          proxyWebsockets = true;
+        };
+      };
     };
   };
 }