noah/dotfiles
1
0
Fork 0
mirror of https://github.com/nmasur/dotfiles synced 2024-12-26 17:34:54 +00:00
Code Issues Packages Projects Releases Wiki Activity

change from media group to shared group

Browse Source
This commit is contained in:
Noah Masur 2024-12-08 23:53:10 +00:00
parent 0d3e42be3f
commit 30cc02c2a7
No known key found for this signature in database
5 changed files with 13 additions and 26 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
flake.lock generated
View File

@ -428,7 +428,7 @@
"flake": false, "flake": false,
"locked": { "locked": {
"lastModified": 1728502660, "lastModified": 1728502660,
"narHash": "sha256-+0EivmFXn/o4CE/7Tgo0DFixZo4ELwKJpfEdQllEJMw=", "narHash": "sha256-oCw6Brs85rINBHvz3UJXheyLVqvA3RgPXG03b30Fx7E=",
"type": "tarball", "type": "tarball",
"url": "https://snappymail.eu/repository/nextcloud/snappymail-2.38.2-nextcloud.tar.gz" "url": "https://snappymail.eu/repository/nextcloud/snappymail-2.38.2-nextcloud.tar.gz"
}, },

20
modules/nixos/services/arr.nix
View File

@ -56,38 +56,32 @@ in
services = { services = {
bazarr = { bazarr = {
enable = true; enable = true;
group = "media"; group = "shared";
}; };
jellyseerr.enable = true; jellyseerr.enable = true;
prowlarr.enable = true; prowlarr.enable = true;
sabnzbd = { sabnzbd = {
enable = true; enable = true;
group = "media"; group = "shared";
# The config file must be editable within the application # The config file must be editable within the application
# It contains server configs and credentials # It contains server configs and credentials
configFile = "/data/downloads/sabnzbd/sabnzbd.ini"; configFile = "/data/downloads/sabnzbd/sabnzbd.ini";
}; };
sonarr = { sonarr = {
enable = true; enable = true;
group = "media"; group = "shared";
}; };
radarr = { radarr = {
enable = true; enable = true;
group = "media"; group = "shared";
}; };
readarr = { readarr = {
enable = true; enable = true;
group = "media"; group = "shared";
}; };
}; };
# Create a media group to be shared between services # Allows shared group to read/write the sabnzbd directory
users.groups.media = { };
# Give the human user access to the media group
users.users.${config.user}.extraGroups = [ "media" ];
# Allows media group to read/write the sabnzbd directory
users.users.sabnzbd.homeMode = "0770"; users.users.sabnzbd.homeMode = "0770";
unfreePackages = [ "unrar" ]; # Required as a dependency for sabnzbd unfreePackages = [ "unrar" ]; # Required as a dependency for sabnzbd
@ -108,7 +102,7 @@ in
handle = [ handle = [
{ {
handler = "reverse_proxy"; handler = "reverse_proxy";
# We're able to reference the url and port of the service dynamically # We're able to reference the url and port of the service dynamically
upstreams = [ { dial = arrConfig.sonarr.url; } ]; upstreams = [ { dial = arrConfig.sonarr.url; } ];
} }
]; ];

10
modules/nixos/services/audiobookshelf.nix
View File

@ -4,6 +4,7 @@
config = lib.mkIf config.services.audiobookshelf.enable { config = lib.mkIf config.services.audiobookshelf.enable {
services.audiobookshelf = { services.audiobookshelf = {
group = "shared";
dataDir = "audiobookshelf"; dataDir = "audiobookshelf";
}; };
@ -23,15 +24,6 @@
# Configure Cloudflare DNS to point to this machine # Configure Cloudflare DNS to point to this machine
services.cloudflare-dyndns.domains = [ config.hostnames.audiobooks ]; services.cloudflare-dyndns.domains = [ config.hostnames.audiobooks ];
# Grant user access to Audiobookshelf directories
users.users.${config.user}.extraGroups = [ config.services.audiobookshelf.group ];
# Grant audiobookshelf access to media and Calibre directories
users.users.${config.services.audiobookshelf.user}.extraGroups = [
"media"
"calibre-web"
];
}; };
} }

1
modules/nixos/services/calibre.nix
View File

@ -28,6 +28,7 @@ in
config = lib.mkIf config.services.calibre-web.enable { config = lib.mkIf config.services.calibre-web.enable {
services.calibre-web = { services.calibre-web = {
group = "shared";
openFirewall = true; openFirewall = true;
options = { options = {
reverseProxyAuth.enable = false; reverseProxyAuth.enable = false;

6
modules/nixos/services/jellyfin.nix
View File

@ -11,7 +11,7 @@
config = lib.mkIf config.services.jellyfin.enable { config = lib.mkIf config.services.jellyfin.enable {
services.jellyfin.group = "media"; services.jellyfin.group = "shared";
users.users.jellyfin = { users.users.jellyfin = {
isSystemUser = true; isSystemUser = true;
}; };
@ -49,8 +49,8 @@
# Create videos directory, allow anyone in Jellyfin group to manage it # Create videos directory, allow anyone in Jellyfin group to manage it
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
"d /var/lib/jellyfin 0775 jellyfin media" "d /var/lib/jellyfin 0775 jellyfin shared"
"d /var/lib/jellyfin/library 0775 jellyfin media" "d /var/lib/jellyfin/library 0775 jellyfin shared"
]; ];
# Enable VA-API for hardware transcoding # Enable VA-API for hardware transcoding