nixos/services
ediblerope 1f07b05c12 sabnzbd: tighten host_whitelist for *arr local calls + group consistency
Two small follow-ups to the SAB module:

- Extend host_whitelist to also include 127.0.0.1 + localhost. SAB's
  local-IP bypass usually handles this, but Sonarr/Radarr's "Hostname
  verification failed" error becomes a real footgun if it ever flips.
- Add extraGroups = [ "media" ] for parity with sonarr/radarr/qbittorrent.
  No functional change since group = "media" already.

Also wires SABnzbd into arr-interconnect: extracts api_key from
sabnzbd.ini and POSTs a Sabnzbd download client into Sonarr (tv-sonarr
category) and Radarr (radarr category). Idempotent like the existing
qBittorrent block; silently skips on first boot before SAB has materialised
its config.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-04 19:25:07 +01:00
..
adguard.nix adguard: explicitly enable LAN rewrites (schema change on stable) 2026-04-29 18:56:11 +01:00
arr-interconnect.nix sabnzbd: tighten host_whitelist for *arr local calls + group consistency 2026-05-04 19:25:07 +01:00
authelia.nix Update services/authelia.nix 2026-05-04 01:46:41 -07:00
bazarr.nix Force UMask=0002 on Radarr, Sonarr, Bazarr 2026-04-16 20:22:37 +01:00
cloudflare-ddns.md Update docs: add new services to readme, remove obsolete go2rtc-readme 2026-04-07 20:42:19 +01:00
cloudflare-ddns.nix Update cloudflare-ddns.nix 2026-02-15 09:06:23 +02:00
crowdsec.nix locale + crowdsec: pin timezone, declare static crowdsec user 2026-04-29 14:00:41 +01:00
forgejo-runner.nix runner: resolve action refs against github.com by default 2026-05-01 18:45:35 +01:00
game-servers.nix 7dtd-coop: START_MODE=1 (Start), not 2 (Update+STOP) 2026-04-25 19:51:32 +01:00
go2rtc.nix Fix go2rtc: use RuntimeDirectory instead of mkdir /run/go2rtc 2026-04-07 20:51:22 +01:00
homepage.nix flake: split mediaserver onto nixos-25.11, keep desktops on unstable 2026-04-29 13:26:07 +01:00
jellyfin.nix Force Jellyfin UMask=0002 to override new nixpkgs default 2026-04-16 20:20:01 +01:00
nginx.nix Update services/nginx.nix 2026-05-04 02:30:28 -07:00
profilarr.nix profilarr: use Docker Hub image (santiagosayshey), not GHCR 2026-04-30 20:05:30 +01:00
prowlarr.nix Update prowlarr.nix 2026-01-22 10:49:01 +00:00
qbittorrent-nox.nix qbit: fix CSRF-loop behind Authelia + self-heal data-dir ownership 2026-04-24 20:04:04 +01:00
radarr.nix Force UMask=0002 on Radarr, Sonarr, Bazarr 2026-04-16 20:22:37 +01:00
router.nix router: also accept docker user-defined bridges (br-*) 2026-05-01 19:10:29 +01:00
sabnzbd.nix sabnzbd: tighten host_whitelist for *arr local calls + group consistency 2026-05-04 19:25:07 +01:00
server-permissions.nix Reorganise hardware vs host config, tidy settings and services 2026-04-01 21:16:59 +01:00
sonarr.nix Force UMask=0002 on Radarr, Sonarr, Bazarr 2026-04-16 20:22:37 +01:00