Added readarr-audio

nixarr/readarr/default.nix

@@ -7,7 +7,8 @@
 with lib; let
   cfg = config.nixarr.readarr;
   nixarr = config.nixarr;
-  defaultPort = 8787;
+  uid = 250;
+  port = 8787;
 in {
   options.nixarr.readarr = {
     enable = mkOption {
@@ -21,6 +22,12 @@ in {
 
     package = mkPackageOption pkgs "readarr" {};
 
+    port = mkOption {
+      type = types.port;
+      default = port;
+      description = "Port for Readarr to use.";
+    };
+
     stateDir = mkOption {
       type = types.path;
       default = "${nixarr.stateDir}/readarr";
@@ -71,31 +78,52 @@ in {
       }
     ];
 
-    services.readarr = {
-      enable = cfg.enable;
-      package = cfg.package;
-      user = "readarr";
-      group = "media";
-      openFirewall = cfg.openFirewall;
-      dataDir = cfg.stateDir;
+    systemd.tmpfiles.rules = [
+      "d '${cfg.dataDir}' 0700 ${cfg.user} ${cfg.group} - -"
+    ];
+
+    systemd.services.readarr = {
+      description = "Readarr";
+      after = ["network.target"];
+      wantedBy = ["multi-user.target"];
+      environment = {
+        READARR__SERVER__PORT = cfg.port;
+      };
+
+      serviceConfig = {
+        Type = "simple";
+        User = cfg.user;
+        Group = cfg.group;
+        ExecStart = "${lib.getExe cfg.package} -nobrowser -data=${cfg.stateDir}";
+        Restart = "on-failure";
+      };
     };
 
+    networking.firewall = mkIf cfg.openFirewall {
+      allowedTCPPorts = [cfg.port];
+    };
+
+    users.users.readarr = {
+      group = "readarr";
+      home = cfg.stateDir;
+      uid = uid;
+    };
+    users.groups.readarr = {};
+
     # Enable and specify VPN namespace to confine service in.
     systemd.services.readarr.vpnConfinement = mkIf cfg.vpn.enable {
       enable = true;
       vpnNamespace = "wg";
     };
 
-    # Port mappings
     vpnNamespaces.wg = mkIf cfg.vpn.enable {
       portMappings = [
         {
-          from = defaultPort;
-          to = defaultPort;
+          from = cfg.port;
+          to = cfg.port;
         }
       ];
     };
-
     services.nginx = mkIf cfg.vpn.enable {
       enable = true;
 
@@ -103,17 +131,17 @@ in {
       recommendedOptimisation = true;
       recommendedGzipSettings = true;
 
-      virtualHosts."127.0.0.1:${builtins.toString defaultPort}" = {
+      virtualHosts."127.0.0.1:${builtins.toString cfg.port}" = {
         listen = [
           {
             addr = "0.0.0.0";
-            port = defaultPort;
+            port = cfg.port;
           }
         ];
         locations."/" = {
           recommendedProxySettings = true;
           proxyWebsockets = true;
-          proxyPass = "http://192.168.15.1:${builtins.toString defaultPort}";
+          proxyPass = "http://192.168.15.1:${builtins.toString cfg.port}";
         };
       };
     };

nixarr/readarr/readarr-module/default.nix

@@ -0,0 +1,93 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+let
+  cfg = config.services.readarr;
+  servarr = import ./settings-options.nix { inherit lib pkgs; };
+in
+{
+  options = {
+    services.readarr = {
+      enable = lib.mkEnableOption "Readarr, a Usenet/BitTorrent ebook downloader";
+
+      dataDir = lib.mkOption {
+        type = lib.types.str;
+        default = "/var/lib/readarr/";
+        description = "The directory where Readarr stores its data files.";
+      };
+
+      package = lib.mkPackageOption pkgs "readarr" { };
+
+      openFirewall = lib.mkOption {
+        type = lib.types.bool;
+        default = false;
+        description = ''
+          Open ports in the firewall for Readarr
+        '';
+      };
+
+      settings = servarr.mkServarrSettingsOptions "readarr" 8787;
+
+      environmentFiles = servarr.mkServarrEnvironmentFiles "readarr";
+
+      user = lib.mkOption {
+        type = lib.types.str;
+        default = "readarr";
+        description = ''
+          User account under which Readarr runs.
+        '';
+      };
+
+      group = lib.mkOption {
+        type = lib.types.str;
+        default = "readarr";
+        description = ''
+          Group under which Readarr runs.
+        '';
+      };
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    systemd.tmpfiles.settings."10-readarr".${cfg.dataDir}.d = {
+      inherit (cfg) user group;
+      mode = "0700";
+    };
+
+    systemd.services.readarr = {
+      description = "Readarr";
+      after = [ "network.target" ];
+      wantedBy = [ "multi-user.target" ];
+      environment = servarr.mkServarrSettingsEnvVars "READARR" cfg.settings;
+
+      serviceConfig = {
+        Type = "simple";
+        User = cfg.user;
+        Group = cfg.group;
+        EnvironmentFile = cfg.environmentFiles;
+        ExecStart = "${cfg.package}/bin/Readarr -nobrowser -data='${cfg.dataDir}'";
+        Restart = "on-failure";
+      };
+    };
+
+    networking.firewall = lib.mkIf cfg.openFirewall {
+      allowedTCPPorts = [ cfg.settings.server.port ];
+    };
+
+    users.users = lib.mkIf (cfg.user == "readarr") {
+      readarr = {
+        description = "Readarr service";
+        home = cfg.dataDir;
+        group = cfg.group;
+        isSystemUser = true;
+      };
+    };
+
+    users.groups = lib.mkIf (cfg.group == "readarr") {
+      readarr = { };
+    };
+  };
+}