Add a new test that validates VPN namespace isolation for Nixarr services.
The test uses a 3-VM topology to ensure that transmission traffic is properly
confined to the VPN tunnel and includes:
- IPv4 and IPv6 traffic routing verification
- DNS leak detection using tcpdump and static DNS entries
- Traffic leak prevention when VPN fails
- Port forwarding from external clients
- Service recovery after VPN reconnection
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
Add a test that validates file permissions, ownership, and service access
for key Nixarr services. The test verifies:
- Users and groups exist with correct membership
- Directory ownership matches expected patterns
- Services can write/read files in media directories
- Cross-seed can access transmission state
- fix-permissions command works correctly
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
This gets rid of a pesky warning:
`warning: input 'vpnconfinement' has an override for a non-existent input 'nixpkgs'`
VPN Confinement flake no longer has a nixpkgs input since 2435967.
Alexandra Østermark