add tdarr

nixos/machines/chungus/configuration.nix

@@ -17,7 +17,10 @@
 
     #./borg.nix
     #./taskwarrior-pushover.nix
+
+    ./tdarr.nix
     #./jellyfin.nix
+
     #./wireguard.nix
 
     # logging
@@ -28,7 +31,6 @@
     ./telegraf.nix
 
     #./home-display.nix
-    #./tdarr.nix
 
     ./rbackup.nix
     ./sync-torrent.nix

nixos/machines/chungus/sync-torrent.nix

@@ -31,6 +31,7 @@ in
 
       services.transmission = {
         enable = true;
+
         settings = {
           download-dir = "/media";
           incomplete-dir = "/var/lib/transmission/incomplete"; # todo put this somewhere with frequent snapshots but low keep.

nixos/machines/chungus/tdarr.nix

@@ -0,0 +1,69 @@
+{ config, lib, pkgs, ... }:
+{
+
+  # To set password:
+  # nix-shell -p samba --run "smbpasswd -a media"
+  custom.samba-share.enable = true;
+  custom.samba-share.private.media = {
+    folder = "/media";
+    users = "media";
+  };
+
+  users.groups."media".gid = config.ids.gids.transmission;
+  users.users."media" = {
+    uid = config.ids.uids.transmission;
+    group = "media";
+  };
+
+  services.permown."/media" = {
+    owner = "media";
+    group = "media";
+  };
+
+  # https://docs.tdarr.io/docs/installation/docker/run-compose
+  virtualisation.oci-containers = {
+    #backend = "podman";
+    containers.tdarr = {
+      volumes = [
+        "/srv/tdarr/server:/app/server"
+        "/srv/tdarr/configs:/app/configs"
+        "/srv/tdarr/logs:/app/logs"
+        "/srv/tdarr/transcode_cache:/temp"
+        "/media:/media"
+      ];
+      environment = {
+        serverIP = "0.0.0.0";
+        serverPort = "8266";
+        webUIPort = "8265";
+        internalNode = "false";
+        inContainer = "true";
+        nodeName = "ServerNode";
+        TZ = "Europe/London";
+        PUID = toString config.ids.uids.transmission;
+        PGID = toString config.ids.gids.transmission;
+      };
+      ports = [
+        "8265:8265" # WebUI
+        "8266:8266" # server port
+      ];
+      image = "ghcr.io/haveagitgat/tdarr:latest"; # Warning: if the tag does not change, the image will not be updated
+      extraOptions = [ "--network=bridge" ];
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [ 8266 ];
+  networking.firewall.allowedUDPPorts = [ 8266 ];
+
+  services.nginx.virtualHosts."tdarr.${config.networking.hostName}.private" = {
+    serverAliases = [ "tdarr.${config.networking.hostName}" ];
+    extraConfig = ''
+      allow ${config.tinc.private.subnet};
+      deny all;
+    '';
+    locations."/" = {
+      proxyPass = "http://localhost:8265";
+      proxyWebsockets = true;
+    };
+  };
+
+}