From 6f3845aa1b8273aab1bb33ebbd9e9c36194a2a42 Mon Sep 17 00:00:00 2001
From: rope <fredrik@nordhammer.it>
Date: Tue, 19 May 2026 10:54:44 +0100
Subject: [PATCH] mediaserver: enable podman for bazarr-sync container policy

Standalone podman run calls need virtualisation.podman.enable to get a
valid /etc/containers/policy.json. OCI container services got this
implicitly but our direct podman invocations did not.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 services/bazarr-sync.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/services/bazarr-sync.nix b/services/bazarr-sync.nix
index 5239869..08e250a 100644
--- a/services/bazarr-sync.nix
+++ b/services/bazarr-sync.nix
@@ -134,6 +134,9 @@ in
 {
   config = lib.mkIf (config.networking.hostName == "FredOS-Mediaserver") {
 
+    # Ensure podman is available with a valid container policy
+    virtualisation.podman.enable = true;
+
     # Persistent directory for the generated config.yaml
     systemd.tmpfiles.rules = [
       "d /var/lib/bazarr-sync 0700 root root -"