{
  config,
  pkgs,
  inputs,
  lib,
  ...
}: {
  networking.firewall.allowedTCPPorts = [22067 22070];
  services.syncthing.relay = {
    enable = true;
    listenAddress = "vpsfree1.cyplo.github.beta.tailscale.net";
    pools = [""]; # private relay
  };
}