Set UMask 0002 on all media services for group-writable files

Sonarr, Radarr, qBittorrent, Jellyfin, and Bazarr all need to create
files that are writable by the media group. Without this, Jellyfin
can't write thumbnails/artwork to media directories and services
can't collaborate on shared files. Also fixes radarr movies directory
to use setgid (2775) consistently.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
ediblerope 2026-04-15 23:23:56 +01:00
parent 3c6e86aca9
commit 984f45e1d4
5 changed files with 17 additions and 4 deletions

View file

@ -11,6 +11,9 @@
user = "radarr";
group = "media";
};
# Ensure files created by radarr are group-writable
systemd.services.radarr.serviceConfig.UMask = "0002";
# Media group is already created in qbittorrent-nox.nix
# Just make sure radarr is in it
@ -23,8 +26,8 @@
# Set up directory structure with proper permissions
systemd.tmpfiles.rules = [
# Media folders - radarr writes here
"d /mnt/storage/torrents/movies 0775 radarr media -"
"Z /mnt/storage/torrents/movies 0775 radarr media -"
"d /mnt/storage/torrents/movies 2775 radarr media -"
"Z /mnt/storage/torrents/movies 2775 radarr media -"
];
};
}