jahanson/mochi
1
0
Fork 0
Code Issues 1 Pull requests 2 Projects Releases Packages Wiki Activity Actions

to remove/rearrange files privileged is required.

Browse source
This commit is contained in:
Joseph Hanson 2025-02-09 19:24:05 -06:00
parent aae3f3397e
commit e782f7c268
Signed by: jahanson
SSH key fingerprint: SHA256:vy6dKBECV522aPAwklFM3ReKAVB086rT3oWwiuiFG7o
2 changed files with 24 additions and 26 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
nixos/modules/nixos/services/radarr/default.nix
View file

@ -5,8 +5,7 @@
utils, utils,
... ...
}: }:
with lib; with lib; let
let
cfg = config.mySystem.services.radarr; cfg = config.mySystem.services.radarr;
dbOptions = { dbOptions = {
options = { options = {
@ -51,8 +50,7 @@ let
}; };
}; };
}; };
in in {
{
options.mySystem.services.radarr = { options.mySystem.services.radarr = {
enable = mkEnableOption "Radarr"; enable = mkEnableOption "Radarr";
@ -225,6 +223,7 @@ in
cfg.dataDir cfg.dataDir
cfg.moviesDir cfg.moviesDir
"/var/log/radarr" "/var/log/radarr"
"/eru/media"
]; ];
RestrictAddressFamilies = [ RestrictAddressFamilies = [
"AF_INET" "AF_INET"
@ -243,7 +242,7 @@ in
SystemCallArchitectures = "native"; SystemCallArchitectures = "native";
SystemCallFilter = [ SystemCallFilter = [
"@system-service" "@system-service"
"~@privileged" #"~@privileged"
# .Net CLR requirement # .Net CLR requirement
#"~@resources" #"~@resources"
]; ];

9
nixos/modules/nixos/services/sonarr/default.nix
View file

@ -5,8 +5,7 @@
utils, utils,
... ...
}: }:
with lib; with lib; let
let
cfg = config.mySystem.services.sonarr; cfg = config.mySystem.services.sonarr;
dbOptions = { dbOptions = {
options = { options = {
@ -51,8 +50,7 @@ let
}; };
}; };
}; };
in in {
{
options.mySystem.services.sonarr = { options.mySystem.services.sonarr = {
enable = mkEnableOption "Sonarr"; enable = mkEnableOption "Sonarr";
@ -225,6 +223,7 @@ in
cfg.dataDir cfg.dataDir
cfg.tvDir cfg.tvDir
"/var/log/sonarr" "/var/log/sonarr"
"/eru/media"
]; ];
RestrictAddressFamilies = [ RestrictAddressFamilies = [
"AF_INET" "AF_INET"
@ -244,7 +243,7 @@ in
SystemCallArchitectures = "native"; SystemCallArchitectures = "native";
SystemCallFilter = [ SystemCallFilter = [
"@system-service" "@system-service"
"~@privileged" #"~@privileged"
# .Net CLR requirement # .Net CLR requirement
#"~@resources" #"~@resources"
]; ];