nixos/jackflix: Add Transmission

nixos/boxes/colony/vms/shill/containers/jackflix/default.nix

@@ -36,6 +36,7 @@
           users = {
             groups.media = {};
             users = {
+              transmission.extraGroups = [ "media" ];
               radarr.extraGroups = [ "media" ];
             };
           };
@@ -47,6 +48,31 @@
           };
 
           services = {
+            transmission = {
+              enable = true;
+              openPeerPorts = true;
+              openRPCPort = true;
+              downloadDirPermissions = null;
+              performanceNetParameters = true;
+              settings = {
+                download-dir = "/mnt/media/downloads/torrents";
+                incomplete-dir-enabled = true;
+                incomplete-dir = "/mnt/media/downloads/torrents/.incomplete";
+                umask = 002;
+
+                peer-port = 55471;
+                utp-enabled = true;
+                port-forwarding-enabled = false;
+
+                ratio-limit = 2.0;
+                ratio-limit-enabled = true;
+
+                rpc-bind-address = "::";
+                rpc-whitelist-enabled = false;
+                rpc-host-whitelist-enabled = false;
+              };
+            };
+
             jackett = {
               enable = true;
               openFirewall = true;

nixos/boxes/colony/vms/shill/containers/middleman/vhosts.nix

@@ -153,7 +153,20 @@ in
         useACMEHost = lib.my.pubDomain;
       };
 
-      "jackett.${lib.my.pubDomain}" = mkMerge [
+      "torrents-test.${lib.my.pubDomain}" = mkMerge [
+        {
+          locations."/" = mkMerge [
+            {
+              proxyPass = "http://jackflix-ctr.${config.networking.domain}:9091";
+            }
+            (ssoLoc "generic")
+          ];
+          useACMEHost = lib.my.pubDomain;
+        }
+        (ssoServer "generic")
+      ];
+
+      "jackett-test.${lib.my.pubDomain}" = mkMerge [
         {
           locations."/" = mkMerge [
             {

nixos/boxes/colony/vms/shill/default.nix

@@ -38,7 +38,20 @@
 
         config = mkMerge [
           {
-            boot.kernelParams = [ "console=ttyS0,115200n8" ];
+            boot = {
+              kernelParams = [ "console=ttyS0,115200n8" ];
+              # Stolen from nixos/modules/services/torrent/transmission.nix
+              kernel.sysctl = {
+                "net.core.rmem_max" = "4194304"; # 4MB
+                "net.core.wmem_max" = "1048576"; # 1MB
+                "net.ipv4.ip_local_port_range" = "16384 65535";
+                "net.netfilter.nf_conntrack_generic_timeout" = 60;
+                "net.netfilter.nf_conntrack_tcp_timeout_established" = 600;
+                "net.netfilter.nf_conntrack_tcp_timeout_time_wait" = 1;
+                "net.netfilter.nf_conntrack_max" = 1048576;
+              };
+            };
+
             fileSystems = {
               "/boot" = {
                 device = "/dev/disk/by-label/ESP";