rope/nixos
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

sabnzbd: point complete_dir at group-writable pool path + permissions=0775

Browse source 
Fixes Sonarr/Radarr import fail-loop (can't delete sources → mergerfs thrash).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
rope 2026-07-21 09:41:16 +01:00
parent ebd01b7b30
commit 40ef4444fa
1 changed files with 24 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

30
services/sabnzbd.nix
View file

@ -7,17 +7,35 @@ let
patchConfig = pkgs.writeShellScript "sabnzbd-patch-config" ''
CONFIG=/var/lib/sabnzbd/sabnzbd.ini
WHITELIST="sabnzbd.nordhammer.it,127.0.0.1,localhost"
# Completed downloads must land on the setgid, group-writable pool dir
# (see tmpfiles below), NOT sabnzbd's default /var/lib/sabnzbd/Downloads/
# complete which is 0755 — there Sonarr/Radarr (group media) can copy the
# file out but can't delete the source, so imports fail-loop forever with
# "Permission denied" and thrash the mergerfs pool. permissions=0775 makes
# sabnzbd force group-write on completed files/dirs so the *arrs can remove
# them after import.
COMPLETE_DIR="/mnt/storage/usenet/downloads"
PERMISSIONS="0775"
if [ ! -f "$CONFIG" ]; then
printf '[misc]\nhost_whitelist = %s\nport = 8085\n' "$WHITELIST" > "$CONFIG"
printf '[misc]\nhost_whitelist = %s\nport = 8085\ncomplete_dir = %s\npermissions = %s\n' \
"$WHITELIST" "$COMPLETE_DIR" "$PERMISSIONS" > "$CONFIG"
exit 0
fi
if ${pkgs.gnugrep}/bin/grep -q "^host_whitelist" "$CONFIG"; then
${pkgs.gnused}/bin/sed -i "s/^host_whitelist =.*/host_whitelist = $WHITELIST/" "$CONFIG"
else
${pkgs.gnused}/bin/sed -i "/^\[misc\]/a host_whitelist = $WHITELIST" "$CONFIG"
fi
# Idempotently set a key in the [misc] section (create or replace).
set_misc() {
key="$1"; val="$2"
if ${pkgs.gnugrep}/bin/grep -q "^$key" "$CONFIG"; then
${pkgs.gnused}/bin/sed -i "s|^$key =.*|$key = $val|" "$CONFIG"
else
${pkgs.gnused}/bin/sed -i "/^\[misc\]/a $key = $val" "$CONFIG"
fi
}
set_misc host_whitelist "$WHITELIST"
set_misc complete_dir "$COMPLETE_DIR"
set_misc permissions "$PERMISSIONS"
'';
in
{