feat(merope/jellyseerr): init

hosts/merope/services/media/default.nix

@@ -10,5 +10,6 @@
     ./recyclarr.nix
     ./deluge.nix
     ./sabnzbd.nix
+    ./jellyseerr.nix
   ];
 }

hosts/merope/services/media/jellyseerr.nix

@@ -0,0 +1,39 @@
+{config, lib, ...}: {
+  services.jellyseerr = {
+    enable = true;
+  };
+
+  services.nginx.virtualHosts."requests.m7.rs" = {
+    forceSSL = true;
+    enableACME = true;
+    locations."/" = {
+      proxyPass = "http://localhost:${toString config.services.jellyseerr.port}";
+      proxyWebsockets = true;
+    };
+  };
+
+
+  environment.persistence = {
+    "/persist".directories = [{
+      directory = "/var/lib/jellyseerr";
+      user = "jellyseerr";
+      group = "jellyseerr";
+      mode = "0700";
+    }];
+  };
+
+  # Disable DynamicUser
+  systemd.services.jellyseerr.serviceConfig = {
+    DynamicUser = lib.mkForce false;
+    User = lib.mkForce "jellyseerr";
+    Group = lib.mkForce "jellyseerr";
+  };
+  users = {
+    users.jellyseerr = {
+      home = "/var/lib/jellyseerr";
+      group = "jellyseerr";
+      isSystemUser = true;
+    };
+    groups.jellyseerr = {};
+  };
+}