feat: added radarr, sonarr, and bazarr to the jellyfin_media group

configurations/nixos/defiant/configuration.nix

@@ -287,6 +287,21 @@
       subdomain = "budget";
     };
 
+    sonarr = {
+      enable = true;
+      openFirewall = true;
+    };
+
+    radarr = {
+      enable = true;
+      openFirewall = true;
+    };
+
+    bazarr = {
+      enable = true;
+      openFirewall = true;
+    };
+
     home-assistant = {
       enable = true;
       subdomain = "home";

configurations/nixos/defiant/packages.nix

@@ -1,9 +1,19 @@
-{pkgs, ...}: {
+{
+  pkgs,
+  lib,
+  ...
+}: {
+  nixpkgs.config.allowUnfreePredicate = pkg:
+    builtins.elem (lib.getName pkg) [
+      "filebot"
+    ];
+
   environment.systemPackages = with pkgs; [
     ffsubsync
     sox
     yt-dlp
     ffmpeg
     imagemagick
+    filebot
   ];
 }

modules/nixos-modules/server/bazarr/default.nix

@@ -0,0 +1,6 @@
+{...}: {
+  imports = [
+    ./proxy.nix
+    ./impermanence.nix
+  ];
+}

modules/nixos-modules/server/bazarr/impermanence.nix

@@ -0,0 +1,26 @@
+{
+  lib,
+  config,
+  ...
+}: let
+  bazarr_data_directory = "/var/lib/bazarr";
+in {
+  config = lib.mkIf (config.services.bazarr.enable && config.host.impermanence.enable) {
+    assertions = [
+      {
+        assertion = config.services.bazarr.dataDir == bazarr_data_directory;
+        message = "bazarr data directory does not match persistence";
+      }
+    ];
+
+    environment.persistence."/persist/system/root" = {
+      directories = [
+        {
+          directory = bazarr_data_directory;
+          user = "bazarr";
+          group = "bazarr";
+        }
+      ];
+    };
+  };
+}

modules/nixos-modules/server/bazarr/proxy.nix

@@ -0,0 +1,28 @@
+{
+  lib,
+  config,
+  ...
+}: {
+  options.services.bazarr = {
+    subdomain = lib.mkOption {
+      type = lib.types.nullOr lib.types.str;
+      default = null;
+      description = "Subdomain for reverse proxy. If null, service will be local only.";
+    };
+    extraSubdomains = lib.mkOption {
+      type = lib.types.listOf lib.types.str;
+      default = [];
+      description = "Extra subdomains for reverse proxy.";
+    };
+  };
+
+  config = lib.mkIf (config.services.bazarr.enable && config.services.bazarr.subdomain != null) {
+    host.reverse_proxy.subdomains.bazarr = {
+      subdomain = config.services.bazarr.subdomain;
+      extraSubdomains = config.services.bazarr.extraSubdomains;
+      target = "http://127.0.0.1:6767";
+      websockets.enable = true;
+      forwardHeaders.enable = true;
+    };
+  };
+}

modules/nixos-modules/server/default.nix

@@ -7,14 +7,17 @@
     ./podman.nix
 
     ./actual
-    ./immich
+    ./bazarr
-    ./panoramax
     ./forgejo
     ./home-assistant
+    ./immich
     ./jellyfin
+    ./panoramax
     ./paperless
-    ./searx
     ./qbittorent.nix
+    ./radarr
+    ./searx
+    ./sonarr
     ./wyoming.nix
   ];
 }

modules/nixos-modules/server/radarr/default.nix

@@ -0,0 +1,6 @@
+{...}: {
+  imports = [
+    ./proxy.nix
+    ./impermanence.nix
+  ];
+}

modules/nixos-modules/server/radarr/impermanence.nix

@@ -0,0 +1,26 @@
+{
+  lib,
+  config,
+  ...
+}: let
+  radarr_data_directory = "/var/lib/radarr/.config/Radarr";
+in {
+  config = lib.mkIf (config.services.radarr.enable && config.host.impermanence.enable) {
+    assertions = [
+      {
+        assertion = config.services.radarr.dataDir == radarr_data_directory;
+        message = "radarr data directory does not match persistence";
+      }
+    ];
+
+    environment.persistence."/persist/system/root" = {
+      directories = [
+        {
+          directory = radarr_data_directory;
+          user = "radarr";
+          group = "radarr";
+        }
+      ];
+    };
+  };
+}

modules/nixos-modules/server/radarr/proxy.nix

@@ -0,0 +1,28 @@
+{
+  lib,
+  config,
+  ...
+}: {
+  options.services.radarr = {
+    subdomain = lib.mkOption {
+      type = lib.types.nullOr lib.types.str;
+      default = null;
+      description = "Subdomain for reverse proxy. If null, service will be local only.";
+    };
+    extraSubdomains = lib.mkOption {
+      type = lib.types.listOf lib.types.str;
+      default = [];
+      description = "Extra subdomains for reverse proxy.";
+    };
+  };
+
+  config = lib.mkIf (config.services.radarr.enable && config.services.radarr.subdomain != null) {
+    host.reverse_proxy.subdomains.radarr = {
+      subdomain = config.services.radarr.subdomain;
+      extraSubdomains = config.services.radarr.extraSubdomains;
+      target = "http://127.0.0.1:7878";
+      websockets.enable = true;
+      forwardHeaders.enable = true;
+    };
+  };
+}

modules/nixos-modules/server/sonarr/default.nix

@@ -0,0 +1,6 @@
+{...}: {
+  imports = [
+    ./proxy.nix
+    ./impermanence.nix
+  ];
+}

modules/nixos-modules/server/sonarr/impermanence.nix

@@ -0,0 +1,26 @@
+{
+  lib,
+  config,
+  ...
+}: let
+  sonarr_data_directory = "/var/lib/sonarr/.config/NzbDrone";
+in {
+  config = lib.mkIf (config.services.sonarr.enable && config.host.impermanence.enable) {
+    assertions = [
+      {
+        assertion = config.services.sonarr.dataDir == sonarr_data_directory;
+        message = "sonarr data directory does not match persistence";
+      }
+    ];
+
+    environment.persistence."/persist/system/root" = {
+      directories = [
+        {
+          directory = sonarr_data_directory;
+          user = "sonarr";
+          group = "sonarr";
+        }
+      ];
+    };
+  };
+}

modules/nixos-modules/server/sonarr/proxy.nix

@@ -0,0 +1,28 @@
+{
+  lib,
+  config,
+  ...
+}: {
+  options.services.sonarr = {
+    subdomain = lib.mkOption {
+      type = lib.types.nullOr lib.types.str;
+      default = null;
+      description = "Subdomain for reverse proxy. If null, service will be local only.";
+    };
+    extraSubdomains = lib.mkOption {
+      type = lib.types.listOf lib.types.str;
+      default = [];
+      description = "Extra subdomains for reverse proxy.";
+    };
+  };
+
+  config = lib.mkIf (config.services.sonarr.enable && config.services.sonarr.subdomain != null) {
+    host.reverse_proxy.subdomains.sonarr = {
+      subdomain = config.services.sonarr.subdomain;
+      extraSubdomains = config.services.sonarr.extraSubdomains;
+      target = "http://127.0.0.1:8989";
+      websockets.enable = true;
+      forwardHeaders.enable = true;
+    };
+  };
+}

modules/nixos-modules/users.nix

@@ -25,6 +25,9 @@
     qbittorrent = 2011;
     paperless = 2012;
     actual = 2013;
+    radarr = 275;
+    sonarr = 274;
+    bazarr = 985;
   };
 
   gids = {
@@ -42,6 +45,9 @@
     qbittorrent = 2011;
     paperless = 2012;
     actual = 2013;
+    radarr = 275;
+    sonarr = 274;
+    bazarr = 981;
   };
 
   users = config.users.users;
@@ -177,6 +183,24 @@ in {
             isSystemUser = true;
             group = config.users.users.actual.name;
           };
+
+          radarr = {
+            uid = lib.mkForce uids.radarr;
+            isSystemUser = true;
+            group = config.users.users.radarr.name;
+          };
+
+          sonarr = {
+            uid = lib.mkForce uids.sonarr;
+            isSystemUser = true;
+            group = config.users.users.sonarr.name;
+          };
+
+          bazarr = {
+            uid = lib.mkForce uids.bazarr;
+            isSystemUser = true;
+            group = config.users.users.bazarr.name;
+          };
         };
 
         groups = {
@@ -206,6 +230,9 @@ in {
             gid = lib.mkForce gids.jellyfin_media;
             members = [
               users.jellyfin.name
+              users.radarr.name
+              users.sonarr.name
+              users.bazarr.name
               leyla
               eve
             ];
@@ -287,6 +314,27 @@ in {
               users.actual.name
             ];
           };
+
+          radarr = {
+            gid = lib.mkForce gids.radarr;
+            members = [
+              users.radarr.name
+            ];
+          };
+
+          sonarr = {
+            gid = lib.mkForce gids.sonarr;
+            members = [
+              users.sonarr.name
+            ];
+          };
+
+          bazarr = {
+            gid = lib.mkForce gids.bazarr;
+            members = [
+              users.bazarr.name
+            ];
+          };
         };
       };
     }