migrated media stuff

nixos/components/network/tinc/private.nix

@@ -20,6 +20,10 @@ let
   };
   subDomains = {
     # orbi
+    "transmission2.orbi" = hosts.orbi;
+    "sonarr.orbi" = hosts.orbi;
+    "radarr.orbi" = hosts.orbi;
+    "prowlarr.orbi" = hosts.orbi;
     # robi
     "grafana.robi" = hosts.robi;
     "loki.robi" = hosts.robi;

nixos/machines/orbi/configuration.nix

@@ -23,12 +23,12 @@
     ./network-tinc.nix
     #./network-wireguard.nix
 
-    #./media-share.nix
+    ./media-share.nix
     #./media-jellyfin.nix
     #./media-syncthing.nix
     #./media-transmission.nix
-    #./media-transmission2.nix
+    ./media-transmission2.nix
-    #./media-arr.nix
+    ./media-arr.nix
 
     #./sync-opentracker.nix
     #./sync-torrent.nix

nixos/machines/orbi/media-transmission2.nix

@@ -6,6 +6,9 @@ in
 
   containers.torrent2 = {
 
+    autoStart = true;
+    privateNetwork = false;
+
     # mount host folders
     bindMounts = {
       media = {
@@ -20,8 +23,6 @@ in
       };
     };
 
-    autoStart = true;
-
     config = { config, pkgs, lib, ... }: {
 
       system.stateVersion = "21.05";
@@ -89,12 +90,6 @@ in
         };
       };
 
-      networking.firewall = {
-        allowedTCPPorts = [ 51413 ];
-        allowedUDPPorts = [ 51413 ];
-      };
-
-      # bind transmission to openvpn
       systemd.services.transmission = {
         serviceConfig = {
           Restart = "always";
@@ -102,6 +97,12 @@ in
             "/media" # this is needed otherwise cp -l is not working
             "/var/lib/transmission/.config/transmission-daemon"
           ];
+          BindReadOnlyPaths = lib.mkForce [ builtins.storeDir "/etc" ];
+          PrivateMounts = lib.mkForce false;
+          PrivateUsers = lib.mkForce false;
+          RootDirectoryStartOnly = lib.mkForce false;
+          RootDirectory = lib.mkForce "/var/lib";
+          ExecStartPre = lib.mkForce [ ]; # this prevents configuration creation, but fixes startup problems
         };
       };
     };

nixos/machines/robi/configuration.nix

@@ -23,16 +23,16 @@
     ./network-wireguard.nix
 
     ./media-share.nix
-    ./media-jellyfin.nix
+    #./media-jellyfin.nix
     ./media-syncthing.nix
-    ./media-transmission.nix
+    #./media-transmission.nix
-    ./media-transmission2.nix
+    #./media-transmission2.nix
-    ./media-arr.nix
+    #./media-arr.nix
 
     ./social-jitsi.nix
 
     # matrix
-    ./social-matrix.nix
+    #./social-matrix.nix
 
     # logging
     ./loki.nix