From 0d0245f8503ab0bd17c908d64adb7a6d410bbed0 Mon Sep 17 00:00:00 2001
From: Joseph Hanson <joe@veri.dev>
Date: Sun, 9 Feb 2025 19:23:16 -0600
Subject: [PATCH] harden sonarr, change zfs snap time

---
 nixos/hosts/shadowfax/default.nix | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/nixos/hosts/shadowfax/default.nix b/nixos/hosts/shadowfax/default.nix
index 6d1242b..603e43e 100644
--- a/nixos/hosts/shadowfax/default.nix
+++ b/nixos/hosts/shadowfax/default.nix
@@ -296,7 +296,7 @@ in {
         group = "kah";
         port = 8989;
         openFirewall = true;
-        hardening = false;
+        hardening = true;
         apiKeyFile = config.sops.secrets."arr/sonarr/apiKey".path;
         db = {
           enable = true;
@@ -370,7 +370,8 @@ in {
         mountPath = "/mnt/restic_nightly_backup";
         zfsDataset = "nahar/containers/volumes";
         snapshotName = "restic_nightly_snap";
-        startAt = "*-*-* 06:30:00 America/Chicago";
+        #startAt = "*-*-* 06:30:00 America/Chicago";
+        startAt = "*-*-* 00:10:00 America/Chicago";
       };
     };
     # System