camelot: create media group

This commit is contained in:
Victor Mignot 2024-01-25 19:38:56 +01:00
parent 2d0dbe24dd
commit a0119935a5
Signed by: dala
GPG key ID: 5E7F2CE1BEAFED3D

View file

@ -1,5 +1,6 @@
{ extraInfo, pkgs, ... }: { extraInfo, pkgs, ... }:
{ {
users.groups.media = { };
services.jellyfin.enable = true; services.jellyfin.enable = true;
services.nginx.virtualHosts.${extraInfo.jellyfinURI} = { services.nginx.virtualHosts.${extraInfo.jellyfinURI} = {
enableACME = true; enableACME = true;
@ -20,23 +21,32 @@
services.sonarr = { services.sonarr = {
enable = true; enable = true;
openFirewall = true; openFirewall = true;
group = "media";
}; };
services.radarr = { services.radarr = {
enable = true; enable = true;
openFirewall = true; openFirewall = true;
group = "media";
};
services.bazarr = {
enable = true;
openFirewall = true;
group = "media";
}; };
# Torrent client # Torrent client
services.deluge = { services.deluge = {
enable = true; enable = true;
web.enable = true; web.enable = true;
group = "media";
}; };
systemd.services.deluged.bindsTo = [ "wireguard-wg1.service" ]; systemd.services.deluged.bindsTo = [ "wireguard-wg1.service" ];
systemd.services.deluged.requires = [ "network-online.target" ]; systemd.services.deluged.requires = [ "network-online.target" ];
systemd.services.deluged.serviceConfig.NetworkNamespacePath = "/var/run/netns/wg1ns"; systemd.services.deluged.serviceConfig.NetworkNamespacePath = "/var/run/netns/wg1ns";
systemd.services.deluged.serviceConfig.PrivateNetwork = false; systemd.services.deluged.serviceConfig.PrivateNetwork = true;
systemd.sockets.deluged-proxy = { systemd.sockets.deluged-proxy = {
description = "Socket for deluge-web to deluged in network namespace"; description = "Socket for deluge-web to deluged in network namespace";