Add prowlarr

modules/servermodules/arr/arr.nix

@@ -1,6 +1,56 @@
+{ pkgs, ... }:
+let
+  mediaGroup = "media";
+in
 {
+  users.users.torrenter = {
+    isSystemUser = true;
+    group = "${mediaGroup}";
+  };
+  users.groups.${mediaGroup} = {
+    members = [
+      "ren"
+      "prowlarr"
+      "radarr"
+    ];
+  };
+
   age.secrets.mullvad = {
     file = ../../../keys/mullvad;
     path = "/etc/wireguard/mullvad.conf";
   };
+
+  networking.firewall.trustedInterfaces = [ "wg-selene" ];
+  services.prowlarr.enable = true;
+
+  services.transmission = {
+    enable = true;
+    user = "torrenter";
+    group = mediaGroup;
+    settings = {
+      incomplete-dir-enabled = true;
+      incomplete-dir = "/media/torrents/.incomplete";
+      blocklist-enabled = true;
+      blocklist-url = "https://github.com/Naunter/BT_BlockLists/raw/master/bt_blocklists.gz";
+      utp-enabled = true;
+      bind-address-ipv4 = "10.64.108.193";
+    };
+  };
+
+  systemd.services.transmission.serviceConfig.IOSchedulingPriority = 7;
+
+  services.radarr = {
+    enable = true;
+    group = mediaGroup;
+    openFirewall = false;
+  };
+
+  environment.systemPackages = [
+    pkgs.flood-for-transmission
+  ];
+
+  systemd.tmpfiles.rules = [
+    "d /media/torrents 0775 torrenter media -"
+    "d /media/torrents/.incomplete 0775 torrenter media -"
+  ];
 }