Add prowlarr

keys/mullvad

@@ -1,9 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 CJLJQg XUBaAf9KX0Ult6W3R7XuQ98NWj+5B2s+p5trfPXruB8
-AWyu3fmSxkRnmXwJLuu90sTaZ6rFSeeCwgpbEWm4bx8
--> ssh-ed25519 pvX1bw hmRs8NMgtjMTHofPgS34bdFWnFFXGC9PnOcbSamNAR8
-k+LnfbyRTarH4ZIlrqQdhmMeK1+KZBLT5gkFnTBDWs4
--> ssh-ed25519 M7OTMg 1USWDfFjCtxQIAilMUknDi9KM4g3WXOQVDP0Vu1O3QM
-8wWkeDNFNcX1yGieJQa0SjTRx4dx3rdUILNVUJuNFG8
---- WcMtQ7HqULtJgzGesYnHfmMA4XfuQrhFIriEoJzAwY8
-⪟$Db–-™æþoÏsc,1ÅË–ëtÍÙ<C38D>@ÿ-ËKj¡ÅV(wёðàªûÛ_÷óɇÓq\·"2¸Ø¾7‹P×I€sæFg/U7A”`<›ÓtCF0z‚´ÁÅq+ÌvšÐÞPaIm!Âv2vC°}ÞÊ–ÈñCØJ}÷$š<>dŒI›xBeœC¢gÉ2…†m­ÿpq/’GÖ8!|úçŠ`K×aÇq~ƒ^VÍóIÈ­Ðd´<>Ê<|ÈÅ€^ÜfôÝpÙ+<2B>'XXá‚Wäβ:@5¼`UH‘îæ»v-,È󌼔íÒ	Ø_ÖLÙ ¿åØîú"Ý‹¸DýàºùE>õmº4v"0¡ŸïðŒ2É×3d]³'/J†(¼ÆWXÖÜ<03>û<EFBFBD>|SsIüØ
Ô؇W5¼¬
+-> ssh-ed25519 CJLJQg sGqIUt3HqWqnKjx4nSP79NtoSgTrEt/anBDl8TF4AHA
+wHfin0l4vjFel0hpJhwWtg82BGdfJIW8pJaOFTa7QdE
+-> ssh-ed25519 pvX1bw iQBJrEJwDHjbXnmLosW9OQ89sHNbh9le5cjTaGa2giI
+rS5fRP62V0Ytg9OHnnyxSUUp+k84b6AaBg4VRkJ7clQ
+-> ssh-ed25519 M7OTMg onwxYM6wZLzvVn2r43ZHrfZli7pA163Rljc0T3s2+B8
+uNcI0LDsXVcqpcJtlrbfmo4XV8HrXHXQDJM072/q+Mw
+--- fKkF6k08bDznE7oHPu9xHoSfhxQYi2LKHFJPjsmiNxk
+Õ6‹Â¹ƒT~`öú§[ØõÇ¡D¥Ç¢ˆp@l˜W®íÙTM9ðzG§ÕÕ¨<>Ž<»ûÏm7sýƒ„ÿõ<C3BF>5‰#W›G‚ßãðÓ®œÂ¡<C382>ÕÓ!])zk†6"¹o+<2B>õ³^ò(h‚;<3B>+)W=|<ÕÔð<>þóVwÚ£›.
utÛlÛY¯‰_;#Å›÷é€#$eâoÞ¡˜¤³ÍK’i
+ÙòIÜ.LL¾ÍX†ü¬Diõ	œÿ’[[Ò¼CÂB3M-rB‰Ïwz}i_ï?@å Ó×m÷ßÁÄNI¢_y…É·…þ"Ö¿†Î<*Ãsæè9†¶^$´Ìä{ËnP#	+ÁGÈ‹/uÜM gk#ž–
+⑃EI‹«°8­»WX¹†‰pOcŸµ±ÂžZáð/vÛ̓ȧ‹õwI¸!u·"îÆ!

modules/servermodules/arr/arr.nix

@@ -1,6 +1,56 @@
+{ pkgs, ... }:
+let
+  mediaGroup = "media";
+in
 {
+  users.users.torrenter = {
+    isSystemUser = true;
+    group = "${mediaGroup}";
+  };
+  users.groups.${mediaGroup} = {
+    members = [
+      "ren"
+      "prowlarr"
+      "radarr"
+    ];
+  };
+
   age.secrets.mullvad = {
     file = ../../../keys/mullvad;
     path = "/etc/wireguard/mullvad.conf";
   };
+
+  networking.firewall.trustedInterfaces = [ "wg-selene" ];
+  services.prowlarr.enable = true;
+
+  services.transmission = {
+    enable = true;
+    user = "torrenter";
+    group = mediaGroup;
+    settings = {
+      incomplete-dir-enabled = true;
+      incomplete-dir = "/media/torrents/.incomplete";
+      blocklist-enabled = true;
+      blocklist-url = "https://github.com/Naunter/BT_BlockLists/raw/master/bt_blocklists.gz";
+      utp-enabled = true;
+      bind-address-ipv4 = "10.64.108.193";
+    };
+  };
+
+  systemd.services.transmission.serviceConfig.IOSchedulingPriority = 7;
+
+  services.radarr = {
+    enable = true;
+    group = mediaGroup;
+    openFirewall = false;
+  };
+
+  environment.systemPackages = [
+    pkgs.flood-for-transmission
+  ];
+
+  systemd.tmpfiles.rules = [
+    "d /media/torrents 0775 torrenter media -"
+    "d /media/torrents/.incomplete 0775 torrenter media -"
+  ];
 }