# services/bazarr.nix { config, pkgs, lib, ... }: { config = lib.mkIf (config.networking.hostName == "FredOS-Mediaserver") { # Bazarr services.bazarr = { enable = true; openFirewall = true; # Opens port 7878 dataDir = "/var/lib/bazarr"; user = "bazarr"; group = "media"; }; # Ensure subtitles written by bazarr are group-writable systemd.services.bazarr.serviceConfig.UMask = lib.mkForce "0002"; users.users.bazarr = { isSystemUser = true; group = "media"; extraGroups = [ "media" ]; }; }; }