Removed vpn, using Maroka's instead, removes all containerization :')

nixarr/readarr/default.nix

@@ -6,7 +6,6 @@
 with lib; let
   cfg = config.nixarr.readarr;
   nixarr = config.nixarr;
-  dnsServers = config.lib.vpn.dnsServers;
 in {
   options.nixarr.readarr = {
     enable = mkEnableOption "Enable the Readarr service";
@@ -50,53 +49,15 @@ in {
       dataDir = cfg.stateDir;
     };
 
-    util-nixarr.vpnnamespace.portMappings = [
-      (
-        mkIf cfg.vpn.enable {
-          From = defaultPort;
-          To = defaultPort;
-        }
-      )
-    ];
-
-    systemd.services."container@readarr" = mkIf cfg.vpn.enable {
-      requires = ["wg.service"];
+    # Enable and specify VPN namespace to confine service in.
+    systemd.services.readarr.vpnconfinement = mkIf cfg.vpn.enable {
+      enable = true;
+      vpnnamespace = "wg";
     };
 
-    containers.readarr = mkIf cfg.vpn.enable {
-      autoStart = true;
-      ephemeral = true;
-      extraFlags = ["--network-namespace-path=/var/run/netns/wg"];
-
-      bindMounts = {
-        "${nixarr.mediaDir}".isReadOnly = false;
-        "${cfg.stateDir}".isReadOnly = false;
-      };
-
-      config = {
-        users.groups.media = {
-          gid = config.users.groups.media.gid;
-        };
-        users.users.readarr = {
-          uid = lib.mkForce config.users.users.readarr.uid;
-          isSystemUser = true;
-          group = "media";
-        };
-
-        # Use systemd-resolved inside the container
-        # Workaround for bug https://github.com/NixOS/nixpkgs/issues/162686
-        networking.useHostResolvConf = lib.mkForce false;
-        services.resolved.enable = true;
-        networking.nameservers = dnsServers;
-
-        services.readarr = {
-          enable = true;
-          group = "media";
-          dataDir = "${cfg.stateDir}";
-        };
-
-        system.stateVersion = "23.11";
-      };
+    # Port mappings
+    vpnnamespaces.wg = mkIf cfg.vpn.enable {
+      portMappings = [{ From = defaultPort; To = defaultPort; }];
     };
 
     services.nginx = mkIf cfg.vpn.enable {