diff --git a/hosts/merope/services/media/default.nix b/hosts/merope/services/media/default.nix index bc4f9c5b..abfca9f2 100644 --- a/hosts/merope/services/media/default.nix +++ b/hosts/merope/services/media/default.nix @@ -10,5 +10,6 @@ ./recyclarr.nix ./deluge.nix ./sabnzbd.nix + ./jellyseerr.nix ]; } diff --git a/hosts/merope/services/media/jellyseerr.nix b/hosts/merope/services/media/jellyseerr.nix new file mode 100644 index 00000000..ac54ba58 --- /dev/null +++ b/hosts/merope/services/media/jellyseerr.nix @@ -0,0 +1,39 @@ +{config, lib, ...}: { + services.jellyseerr = { + enable = true; + }; + + services.nginx.virtualHosts."requests.m7.rs" = { + forceSSL = true; + enableACME = true; + locations."/" = { + proxyPass = "http://localhost:${toString config.services.jellyseerr.port}"; + proxyWebsockets = true; + }; + }; + + + environment.persistence = { + "/persist".directories = [{ + directory = "/var/lib/jellyseerr"; + user = "jellyseerr"; + group = "jellyseerr"; + mode = "0700"; + }]; + }; + + # Disable DynamicUser + systemd.services.jellyseerr.serviceConfig = { + DynamicUser = lib.mkForce false; + User = lib.mkForce "jellyseerr"; + Group = lib.mkForce "jellyseerr"; + }; + users = { + users.jellyseerr = { + home = "/var/lib/jellyseerr"; + group = "jellyseerr"; + isSystemUser = true; + }; + groups.jellyseerr = {}; + }; +}