Rename arr-stack.nix to qbittorrent-nox.nix
This commit is contained in:
parent
26d5cd8d0a
commit
f582f10d71
1 changed files with 0 additions and 0 deletions
|
|
@ -1,57 +0,0 @@
|
|||
{ config, pkgs, lib, ... }:
|
||||
{
|
||||
config = lib.mkIf (config.networking.hostName == "FredOS-Mediaserver") {
|
||||
environment.systemPackages = with pkgs; [
|
||||
qbittorrent-nox
|
||||
];
|
||||
|
||||
systemd.services.qbittorrent-nox = {
|
||||
description = "qBittorrent-nox service";
|
||||
after = [ "network.target" ];
|
||||
wantedBy = [ "multi-user.target" ];
|
||||
|
||||
serviceConfig = {
|
||||
Type = "simple";
|
||||
User = "qbittorrent";
|
||||
Group = "qbittorrent";
|
||||
ExecStart = "${pkgs.qbittorrent-nox}/bin/qbittorrent-nox";
|
||||
Restart = "on-failure";
|
||||
|
||||
# Security hardening
|
||||
NoNewPrivileges = true;
|
||||
PrivateTmp = true;
|
||||
ProtectSystem = "strict";
|
||||
ProtectHome = true;
|
||||
ReadWritePaths = [
|
||||
"/var/lib/qbittorrent"
|
||||
"/mnt/storage/torrents"
|
||||
];
|
||||
};
|
||||
|
||||
preStart = ''
|
||||
mkdir -p /var/lib/qbittorrent/.config/qBittorrent
|
||||
cat > /var/lib/qbittorrent/.config/qBittorrent/qBittorrent.conf << EOF
|
||||
[Preferences]
|
||||
Downloads\SavePath=/mnt/storage/torrents/downloads
|
||||
EOF
|
||||
chown -R qbittorrent:qbittorrent /var/lib/qbittorrent/.config
|
||||
'';
|
||||
};
|
||||
|
||||
users.users.qbittorrent = {
|
||||
isSystemUser = true;
|
||||
group = "qbittorrent";
|
||||
home = "/var/lib/qbittorrent";
|
||||
createHome = true;
|
||||
};
|
||||
|
||||
users.groups.qbittorrent = {};
|
||||
|
||||
# Ensure the download directory exists with proper permissions
|
||||
systemd.tmpfiles.rules = [
|
||||
"d /mnt/storage/torrents/downloads 0775 qbittorrent qbittorrent -"
|
||||
];
|
||||
|
||||
users.users.fred.extraGroups = [ "qbittorrent" ];
|
||||
};
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue