my over complex system configurations
nixos/services/slskd: init
+138
-4
+1
modules/nixos/services/default.nix
+1
modules/nixos/services/default.nix
+8
-4
modules/nixos/services/jellyfin.nix
+8
-4
modules/nixos/services/jellyfin.nix
···
17
17
};
18
18
19
19
config = mkIf config.garden.services.jellyfin.enable {
20
-
users.users.jellyfin.extraGroups = [
21
-
"video"
22
-
"render"
23
-
];
20
+
users = {
21
+
groups.media = { };
22
+
users.jellyfin.extraGroups = [
23
+
"video"
24
+
"render"
25
+
];
26
+
};
24
27
25
28
services = {
26
29
jellyfin = {
27
30
enable = true;
31
+
group = "media";
28
32
dataDir = "/srv/storage/jellyfin";
29
33
};
30
34
+51
modules/nixos/services/slskd.nix
+51
modules/nixos/services/slskd.nix
···
1
+
{
2
+
lib,
3
+
self,
4
+
config,
5
+
...
6
+
}:
7
+
let
8
+
inherit (lib) mkIf;
9
+
inherit (self.lib) mkServiceOption mkSecret;
10
+
11
+
cfg = config.garden.services.slskd;
12
+
in
13
+
{
14
+
options.garden.services.slskd = mkServiceOption "slskd" {
15
+
port = 3018;
16
+
host = "0.0.0.0";
17
+
};
18
+
19
+
config = mkIf cfg.enable {
20
+
sops.secrets.slskd = mkSecret {
21
+
file = "slskd";
22
+
key = "env";
23
+
};
24
+
25
+
services.slskd = {
26
+
enable = true;
27
+
openFirewall = true;
28
+
29
+
group = "media";
30
+
31
+
environmentFile = config.sops.secrets.slskd.path;
32
+
33
+
domain = null;
34
+
settings = {
35
+
web = {
36
+
inherit (cfg) port;
37
+
ip_address = cfg.host;
38
+
};
39
+
40
+
permissions.file.mode = 775;
41
+
42
+
directories = {
43
+
incomplete = "/srv/storage/downloads/music";
44
+
downloads = "/srv/storage/media/music";
45
+
};
46
+
47
+
shares.directories = [ "/srv/storage/media/music" ];
48
+
};
49
+
};
50
+
};
51
+
}
+77
secrets/services/slskd.yaml
+77
secrets/services/slskd.yaml
···
1
+
env: ENC[AES256_GCM,data:xscoy8824wN4qEb/xhAbVIUyHHfhaKnY4k7zq+P9eW1Tju5bKneWzC4Mu3gL5ncV+9f4M/jn5sDryBXf466B1OBzbyGQA3wEyqV1bxoBOnZHqeY+aRi9/3hfhjpJO5lbOjGQ+g+2adsAAEeL83SQSNM8niYoZA==,iv:YjtFAygLSyrh3LUhYu+ORXX3U713G5gA9Bv1QImU3wc=,tag:CeGTbG9quzp3nqhVbreFNA==,type:str]
2
+
sops:
3
+
age:
4
+
- recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMQDiHbMSinj8twL9cTgPOfI6OMexrTZyHX27T8gnMj2
5
+
enc: |
6
+
-----BEGIN AGE ENCRYPTED FILE-----
7
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDk1NDQzZyBnNXpo
8
+
OTEzSFVrNGIycDBicENnN2JzTFMyQUE0VmZSQmR0L3YzQVVqOUI4CmxtUTdoYWYy
9
+
UHM0RVl2MU1hY0krVVYzd2pIS3RROGRPamRZekNiVnFKMDAKLS0tIEVKVFBPM1RB
10
+
aE1kNUZwMmMwQnZBRHRITXV2c29vL001blRkRG5nTVhyUDAKrOcXTcZdx03KaqfJ
11
+
k3l3w3bUSC5wuGIzPLftjouB3vE0qN/Zg67SPUtWceGD5/TjmKWt+vmO2t2GTYOk
12
+
/Rg36A==
13
+
-----END AGE ENCRYPTED FILE-----
14
+
- recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAomF8O3ZqZBpLRlAkS1+FwRllSMrREHtndw07trrfcA
15
+
enc: |
16
+
-----BEGIN AGE ENCRYPTED FILE-----
17
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IENXL2NhQSAwRWNp
18
+
K2hSWm5YUEpoQmZZVUNIaHpYcUN5WFBkeHVVbnlXSy9hNnFueTBFCnU4bTJObGRI
19
+
UHZJazVLWWRmRXhwcEVQcHhNTjJoQWNUUldWWnkwQWs2ZlEKLS0tIDdNMHFrWnJu
20
+
cWdPWjNLU3NyZ0tvSHNtT2xIRXNVYnVWQkV2M2p3ejJDSlUKZOwm1ROO0iauX6Sy
21
+
42B4AXp6MwMmHwDo3g4e+o4DNswnCLShIc9bZpES9in8AyHjvVMQXDHS5hkVZ9ta
22
+
kWqZJg==
23
+
-----END AGE ENCRYPTED FILE-----
24
+
- recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKV3N2r1cX3kZMHxuJYaFsjWJRtik/2b/KZ5ru38IqAT
25
+
enc: |
26
+
-----BEGIN AGE ENCRYPTED FILE-----
27
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFh6aDdpUSBYTEJo
28
+
Nm92b1RKeVFkaGp2cWJLbHVHZjhLZkZrMitpcGt0eDk1Wm81WGdrCm5aTFVqN21k
29
+
Nmx3NXhGaG9MS0xRYm5CcitIaTVqTHQvVUdDU2JRZlVEUDQKLS0tIE5WWmFxSVZz
30
+
K3F1RXhodGlDazBMUEZSTktMNUxOVVdHV1NFampVclpwQm8Klv3pf6qTfXRbEqeh
31
+
8wJKoq0YJJbnXgpvg2U1hbTGGyFzEQdDQXsn7LA7J5NRMgg+HKf0O3nFhmCtQ+m3
32
+
XSHEXg==
33
+
-----END AGE ENCRYPTED FILE-----
34
+
- recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN2pZDnEwnOsrf9aPUVkBigeFwAirWPVGliSs5AgcEFr
35
+
enc: |
36
+
-----BEGIN AGE ENCRYPTED FILE-----
37
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFZTUGdBUSBkUUtH
38
+
Wm8yMHVqdWpyYUVNTUNlSFJuWm5nZjB4K2tUSUtNamRHVDJoeldjCkFjRlUvTkx1
39
+
SHVweXVXU2FhTTl1eUpINlNpOHMyRS9Ba1h1ZlFubTV5b00KLS0tIFN1dHdUdjBE
40
+
VVV1S0ZMY1lXSU96MEZ4Mm9RdWUyVXVCY1Y5YWJPOTRRcGMKdX02V51dQb+FpDdg
41
+
9RBsSj4OWimpA5eiBVYkDSghuEkjIkuhZd386j6RcNJJQNsBCYBKaHC6U1o6oFqw
42
+
VsQruA==
43
+
-----END AGE ENCRYPTED FILE-----
44
+
- recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICOXg0Qq1bdnrYp+KL6tfLZsMf3KHFfpaP2GMjwmpug2
45
+
enc: |
46
+
-----BEGIN AGE ENCRYPTED FILE-----
47
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGRaVG9vQSBOWG9p
48
+
NkRkam5QUndCNmtzT3QxSDVSVkQvN0YwSmtYWW40aC9oUVJ5em5NClRUNEdqSUpz
49
+
MjQxcmRSQVp2eGRoK3NzbXBZLzFuNVg4L2F4My9pYkY0TlUKLS0tIDM0U2VjWEFl
50
+
a2E1bEJOVSt3dTQvQllVQlQveDRvMzdKWkU2U0U4QkV2WVkKSG/M/NVjmVxHa3zK
51
+
tPKakpqR5hTm7QI0w2Zy2Ti2upnF748BJW7PS49EqcYhLjto4uvuVzgjIolk9TlF
52
+
bRNcKg==
53
+
-----END AGE ENCRYPTED FILE-----
54
+
- recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFecrTXoINyGQkeOLQetR5BC6s9VlJHlCbY02WY5FAnJ
55
+
enc: |
56
+
-----BEGIN AGE ENCRYPTED FILE-----
57
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDgrRFVnUSBTRERT
58
+
RVYyMVpnaHZxLzg3Y2QrbTZQQmo2V3lGbzZERlplWnpDcmFOMEdBCndlWCtneUlh
59
+
dHB3cDJQSDRwMElIZmxvSVd4cHZZamdweEJlZGc0cjdDSG8KLS0tIEkrNWJkOUxO
60
+
ZHRtK0dOSURjTnBPblRpbXhYSUE2T0N2ZWF5V0p1cDU4Um8KaPlYxzWHHJCUOoQa
61
+
cJXBEPDaMlM/+PNspTcRSAAQdtN3WuhzgcWjUBfZOOdJOmkRT9W3OnM1+WqPI1U8
62
+
kPrmnQ==
63
+
-----END AGE ENCRYPTED FILE-----
64
+
- recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIErl+4GkgJOoaUUOU9gblWJ6FpIls/adHx0YpOUXXxJA
65
+
enc: |
66
+
-----BEGIN AGE ENCRYPTED FILE-----
67
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IEptYzFtUSBqTDhi
68
+
ZWFWdkdUY2pYZWpIR3hyYnBzNFRId2tya1RoaG5NODU2TjF4L3hzCndXcGQxdFpN
69
+
c3BST1FSd3ZCZVQwalovUERrTFVPamtnZnEyR2kxclg2MzAKLS0tIGZocUJ4S1RW
70
+
RkFFTmdxV1gybVZyODRRSzc4V3hrZHhuclNaZEUxL3ZzaEkKm0b712QHur0Z1rh5
71
+
DkrmCnEfzWrKnLzmLjMZVBKqM0XDyki4znCbxsGu5SW1PqKUZ4SRMYyzsGzIvjN7
72
+
YJ+IYQ==
73
+
-----END AGE ENCRYPTED FILE-----
74
+
lastmodified: "2025-12-31T12:57:41Z"
75
+
mac: ENC[AES256_GCM,data:zcYBns5R24F4OFCSZ0SKP27LKO+yxVForNS3u5EUa3jfGJhzuaZhxjIk9oZdlTQ+axKwIDJG8FC5jatsJUw6AJD+b9HOMQDXXvL+PCAVXMs5a7rZHAKofiYtuX+EjiRQE/j9zpw4vxO5fZm00uKCbVY2IZW+bLqWtRRt1CFmLMg=,iv:5A+rGQDuqXe/5iYxEIEzBwwNc14cx/uTVpVcuQ1Ngto=,tag:5WiFJw+9XE3MIlX5XZDtVA==,type:str]
76
+
unencrypted_suffix: _unencrypted
77
+
version: 3.11.0