nixos/kelder: Add acquisition

2023-05-23 21:32:38 +01:00
parent 18ad20a8c5
commit 1fa718c20a
42 changed files with 964 additions and 407 deletions
--- a/nixos/boxes/kelder/containers/acquisition/default.nix
+++ b/nixos/boxes/kelder/containers/acquisition/default.nix
@@ -0,0 +1,105 @@
+{ lib, ... }: {
+  nixos.systems.kelder-acquisition = {
+    system = "x86_64-linux";
+    nixpkgs = "mine";
+
+    assignments = {
+      internal = {
+        name = "acquisition-ctr";
+        domain = lib.my.kelder.domain;
+        ipv4.address = "${lib.my.kelder.start.ctrs.v4}2";
+      };
+    };
+
+    configuration = { lib, pkgs, config, ... }:
+    let
+      inherit (lib);
+    in
+    {
+      imports = [ ./networking.nix ];
+
+      config = {
+        # Hardware acceleration for Jellyfin
+        hardware.opengl = {
+          enable = true;
+          extraPackages = with pkgs; [
+            vaapiIntel
+            intel-ocl
+          ];
+        };
+
+        my = {
+          deploy.enable = false;
+          server.enable = true;
+          user.config.name = "kontent";
+
+          secrets = {
+            key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILSJ8d0prcSvyYi0UasnxMk/HGF5lWZz/t/VFYgQuFwO";
+          };
+        };
+
+        users = {
+          groups.media.gid = lib.my.kelder.groups.media;
+          users = {
+            "${config.my.user.config.name}".extraGroups = [ "media" ];
+
+            transmission.extraGroups = [ "media" ];
+            radarr.extraGroups = [ "media" ];
+            sonarr.extraGroups = [ "media" ];
+            jellyfin.extraGroups = [ "render" ];
+          };
+        };
+
+        environment.systemPackages = with pkgs; [
+          libva-utils
+          clinfo
+          jellyfin-ffmpeg
+        ];
+
+        systemd = {
+          services = {
+            jackett.bindsTo = [ "systemd-networkd-wait-online@vpn.service" ];
+            transmission.bindsTo = [ "systemd-networkd-wait-online@vpn.service" ];
+
+            radarr.serviceConfig.UMask = "0002";
+            sonarr.serviceConfig.UMask = "0002";
+          };
+        };
+
+        services = {
+          transmission = {
+            enable = true;
+            downloadDirPermissions = null;
+            performanceNetParameters = true;
+            settings = {
+              download-dir = "/mnt/media/downloads/torrents";
+              incomplete-dir-enabled = true;
+              incomplete-dir = "/mnt/media/downloads/torrents/.incomplete";
+              umask = 002;
+
+              utp-enabled = true;
+              port-forwarding-enabled = false;
+
+              speed-limit-down = 20480;
+              speed-limit-down-enabled = true;
+              speed-limit-up = 1024;
+              speed-limit-up-enabled = true;
+              ratio-limit = 2.0;
+              ratio-limit-enabled = true;
+
+              rpc-bind-address = "::";
+              rpc-whitelist-enabled = false;
+              rpc-host-whitelist-enabled = false;
+            };
+          };
+
+          jackett.enable = true;
+          radarr.enable = true;
+          sonarr.enable = true;
+
+          jellyfin.enable = true;
+        };
+      };
+    };
+  };
+}