rope
5eeab405c0
Radarr, Sonarr, Prowlarr, and Bazarr now patch their auth setting to None on every service start — auth is handled by Authelia at the proxy. Also updates readme with missing services, settings files, and flake inputs added since the last readme refresh. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
32 lines
878 B
Nix
32 lines
878 B
Nix
# services/bazarr.nix
|
|
{ config, pkgs, lib, ... }:
|
|
{
|
|
config = lib.mkIf (config.networking.hostName == "FredOS-Mediaserver") {
|
|
|
|
# Bazarr
|
|
services.bazarr = {
|
|
enable = true;
|
|
openFirewall = true; # Opens port 7878
|
|
dataDir = "/var/lib/bazarr";
|
|
user = "bazarr";
|
|
group = "media";
|
|
};
|
|
|
|
# Disable built-in auth — Authelia handles it at the reverse proxy
|
|
systemd.services.bazarr.preStart = lib.mkAfter ''
|
|
config_file="/var/lib/bazarr/config/config.ini"
|
|
if [ -f "$config_file" ]; then
|
|
sed -i 's/^type = .*/type = none/' "$config_file"
|
|
fi
|
|
'';
|
|
|
|
# Ensure subtitles written by bazarr are group-writable
|
|
systemd.services.bazarr.serviceConfig.UMask = lib.mkForce "0002";
|
|
|
|
users.users.bazarr = {
|
|
isSystemUser = true;
|
|
group = "media";
|
|
extraGroups = [ "media" ];
|
|
};
|
|
};
|
|
}
|