From 5d7c159e345f10b36342724875ef80b99208be5f Mon Sep 17 00:00:00 2001
From: Hadi <112569860+anotherhadi@users.noreply.github.com>
Date: Thu, 19 Jun 2025 15:10:03 +0200
Subject: [PATCH] update nixarr conf

Signed-off-by: Hadi <112569860+anotherhadi@users.noreply.github.com>

Former-commit-id: 012e81f99509ff0756c85581292fc641c0528761
---
 server-modules/arr.nix | 47 ++++++++++++++++++++++++++----------------
 1 file changed, 29 insertions(+), 18 deletions(-)

diff --git a/server-modules/arr.nix b/server-modules/arr.nix
index 9e08120..e8a312f 100644
--- a/server-modules/arr.nix
+++ b/server-modules/arr.nix
@@ -1,33 +1,44 @@
-{ config, ... }:
-let
+{config, ...}: let
   domain = "hadi.diy";
-  mkVirtualHost = name: port: {
+  mkVirtualHost = port: {
     useACMEHost = domain;
     forceSSL = true;
-    locations."/" = { proxyPass = "http://127.0.0.1:${toString port}"; };
+    locations."/" = {proxyPass = "http://127.0.0.1:${toString port}";};
   };
+  my-username = config.var.username;
 in {
+  # Add my user to the media group
+  users.users."${my-username}".extraGroups = ["media"];
+
+  # Add my secrets
+  sops.secrets = {
+    recyclarr = {
+      owner = "recyclarr";
+      mode = "0777";
+    };
+    wireguard-pia = {
+      group = "media";
+      mode = "0600";
+    };
+  };
+
   nixarr = {
     enable = true;
+
     vpn = {
       enable = true;
       wgConf = config.sops.secrets.wireguard-pia.path;
     };
-    mediaDir = "/data/media";
-    stateDir = "/data/.state/nixarr";
 
     jellyfin.enable = true;
     jellyseerr.enable = true;
     prowlarr.enable = true;
     radarr.enable = true;
     sonarr.enable = true;
-    bazarr = {
-      enable = true;
-      vpn.enable = true;
-    };
+    bazarr.enable = true;
     transmission = {
       enable = true;
-      extraSettings = { trash-original-torrent-files = true; };
+      extraSettings = {trash-original-torrent-files = true;};
       vpn.enable = true;
     };
     recyclarr = {
@@ -37,12 +48,12 @@ in {
   };
 
   services.nginx.virtualHosts = {
-    "jellyfin.${domain}" = mkVirtualHost "jellyfin" 8096;
-    "jellyseerr.${domain}" = mkVirtualHost "jellyseerr" 5055;
-    "bazarr.${domain}" = mkVirtualHost "bazarr" 6767;
-    "prowlarr.${domain}" = mkVirtualHost "prowlarr" 9696;
-    "radarr.${domain}" = mkVirtualHost "radarr" 7878;
-    "sonarr.${domain}" = mkVirtualHost "sonarr" 8989;
-    "transmission.${domain}" = mkVirtualHost "transmission" 9091;
+    "jellyfin.${domain}" = mkVirtualHost 8096;
+    "jellyseerr.${domain}" = mkVirtualHost 5055;
+    "bazarr.${domain}" = mkVirtualHost 6767;
+    "prowlarr.${domain}" = mkVirtualHost 9696;
+    "radarr.${domain}" = mkVirtualHost 7878;
+    "sonarr.${domain}" = mkVirtualHost 8989;
+    "transmission.${domain}" = mkVirtualHost 9091;
   };
 }