introduce sops to the config to be able to use encrypted tokens and passwords, also use these in factorio

modules/nixos/security/sops/default.nix

@@ -0,0 +1,32 @@
+{
+  options,
+  config,
+  pkgs,
+  lib,
+  inputs,
+  ...
+}:
+with lib;
+with lib.wyrdgard;
+let
+  cfg = config.wyrdgard.security.sops;
+in
+{
+  options.wyrdgard.security.sops = with types; {
+    enable = mkBoolOpt true "Enable sops (Default true)";
+  };
+
+  config = mkIf cfg.enable {
+    environment.systemPackages = with pkgs; [
+      sops
+      age
+    ];
+
+    sops = {
+      defaultSopsFile = ../../../../secrets/secrets.yaml;
+      defaultSopsFormat = "yaml";
+
+      age.keyFile = "/home/cholli/.config/sops/age/keys.txt";
+    };
+  };
+}

modules/nixos/security/syncthing/default.nix

@@ -0,0 +1,58 @@
+{
+  options,
+  config,
+  pkgs,
+  lib,
+  inputs,
+  ...
+}:
+with lib;
+with lib.wyrdgard;
+let
+  cfg = config.wyrdgard.security.syncthing;
+  user = config.wyrdgard.user;
+in
+{
+  options.wyrdgard.security.syncthing = with types; {
+    enable = mkEnableOption "Enable Syncthing";
+  };
+
+  config = mkIf cfg.enable {
+    services.syncthing = {
+      enable = true;
+      user = user.name;
+      dataDir = "/home/" + user.name + "/Documents";
+      configDir = "/home/" + user.name + "/Documents/.config/syncthing";
+      settings = {
+        folders = {
+          "Documents" = {
+            # Name of folder in Syncthing, also the folder ID
+            path = "/home/" + user.name + "/Documents"; # Which folder to add to Syncthing
+          };
+          "Pictures" = {
+            path = "/home/" + user.name + "/Pictures";
+          };
+          "7vfj7-k83xj" = {
+            path = "/home/" + user.name + "/WhatsApp Documents";
+          };
+        };
+        gui = {
+          theme = "black";
+        };
+      };
+    };
+
+    # Syncthing ports: 8384 for remote access to GUI
+    # 22000 TCP and/or UDP for sync traffic
+    # 21027/UDP for discovery
+    # source: https://docs.syncthing.net/users/firewall.html
+    networking.firewall.allowedTCPPorts = [
+      8384
+      22000
+    ];
+    networking.firewall.allowedUDPPorts = [
+      22000
+      21027
+    ];
+  };
+}