b6e2ee3155
* feat: warning for adguard schema mismatch * Auto lint/format * fix: fix filtering * chore: tweak automerge * fix: whoogle * hack * hax * hack * feat: clean tmp on boot * M E G A H A C K * derp lel * chore: name * feat: add shodan! --------- Co-authored-by: Truxnell <9149206+truxnell@users.noreply.github.com> Co-authored-by: truxnell <truxnell@users.noreply.github.com>
102 lines
2.9 KiB
Nix
102 lines
2.9 KiB
Nix
{ lib
|
|
, config
|
|
, pkgs
|
|
, ...
|
|
}:
|
|
with lib;
|
|
let
|
|
app = "sonarr";
|
|
image = "ghcr.io/onedr0p/sonarr:4.0.4@sha256:3689961acc03cc295a2c51cf6fb2227fd69c00c3c27a803c6e8e255ae3e45890";
|
|
user = "568"; #string
|
|
group = "568"; #string
|
|
port = 8989; #int
|
|
cfg = config.mySystem.services.${app};
|
|
appFolder = "containers/${app}";
|
|
persistentFolder = "${config.mySystem.persistentFolder}/${appFolder}";
|
|
containerPersistentFolder = "/config";
|
|
in
|
|
{
|
|
options.mySystem.services.${app} =
|
|
{
|
|
enable = mkEnableOption "${app}";
|
|
addToHomepage = mkEnableOption "Add ${app} to homepage" // { default = true; };
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
# ensure folder exist and has correct owner/group
|
|
systemd.tmpfiles.rules = [
|
|
"d ${persistentFolder} 0755 ${user} ${group} -" #The - disables automatic cleanup, so the file wont be removed after a period
|
|
];
|
|
|
|
sops.secrets."services/${app}/env" = {
|
|
|
|
# configure secret for forwarding rules
|
|
sopsFile = ./secrets.sops.yaml;
|
|
owner = config.users.users.kah.name;
|
|
inherit (config.users.users.kah) group;
|
|
restartUnits = [ "podman-${app}.service" ];
|
|
};
|
|
|
|
virtualisation.oci-containers.containers.${app} = {
|
|
image = "${image}";
|
|
user = "${user}:${group}";
|
|
dependsOn = [ "prowlarr" ];
|
|
environment = {
|
|
TZ = "${config.time.timeZone}";
|
|
PUSHOVER_DEBUG = "false";
|
|
PUSHOVER_APP_URL = "${app}.${config.mySystem.domain}";
|
|
SONARR__INSTANCE_NAME = "Radarr";
|
|
SONARR__APPLICATION_URL = "https://${app}.${config.mySystem.domain}";
|
|
SONARR__LOG_LEVEL = "info";
|
|
};
|
|
environmentFiles = [ config.sops.secrets."services/${app}/env".path ];
|
|
volumes = [
|
|
"${persistentFolder}:/config:rw"
|
|
"${config.mySystem.nasFolder}/natflix:/media:rw"
|
|
"/etc/localtime:/etc/localtime:ro"
|
|
];
|
|
labels = lib.myLib.mkTraefikLabels {
|
|
name = app;
|
|
domain = config.networking.domain;
|
|
|
|
inherit port;
|
|
};
|
|
};
|
|
|
|
mySystem.services.homepage.media-services = mkIf cfg.addToHomepage [
|
|
{
|
|
Sonarr = {
|
|
icon = "${app}.svg";
|
|
href = "https://${app}.${config.mySystem.domain}";
|
|
|
|
description = "TV show management";
|
|
container = "${app}";
|
|
widget = {
|
|
type = "${app}";
|
|
url = "https://${app}.${config.mySystem.domain}";
|
|
key = "{{HOMEPAGE_VAR_SONARR__API_KEY}}";
|
|
};
|
|
};
|
|
}
|
|
];
|
|
|
|
mySystem.services.gatus.monitors = [{
|
|
|
|
name = app;
|
|
group = "media";
|
|
url = "https://${app}.${config.mySystem.domain}";
|
|
interval = "1m";
|
|
conditions = [ "[CONNECTED] == true" "[STATUS] == 200" "[RESPONSE_TIME] < 50" ];
|
|
}];
|
|
|
|
services.restic.backups = config.lib.mySystem.mkRestic
|
|
{
|
|
inherit app user;
|
|
excludePaths = [ "Backups" ];
|
|
paths = [ appFolder ];
|
|
inherit appFolder;
|
|
};
|
|
|
|
|
|
};
|
|
}
|