better containers

flake.nix

@@ -67,7 +67,7 @@
       hosts.nixos-laptop.modules = [ ./hosts/nixos-laptop ];
       hosts.nixos-desktop.modules = [
         ./hosts/nixos-desktop
-        # self.nixosModules.containers
+        self.nixosModules.containers
         self.nixosModules.gaming
       ];
 

modules/containers/media.nix

@@ -1,87 +1,148 @@
 { config, lib, pkgs, ... }:
+let
+  dockerDir = "/home/moritz/Docker/";
+  mediaDir = "/media/media/";
+  puid = "1000";
+  pgid = "100";
+  timeZone = "Europe/Berlin";
+in {
+  home-manager.users.moritz = {
+    home.packages = with pkgs; [ docker-compose ];
+    home.file = {
+      "Media/compose.yml".text = ''
+        version: '3.9'
+        services:
+          transmission-openvpn:
+            container_name: transmission
+            cap_add:
+              - NET_ADMIN
+            volumes:
+              - "${dockerDir}/Transmission:/data/"
+            environment:
+              - LOCAL_NETWORK=192.168.0.0/24
+              - OPENVPN_PROVIDER=NORDVPN
+              - OPENVPN_USERNAME=''${OPENVPN_USERNAME}
+              - OPENVPN_PASSWORD=''${OPENVPN_PASSWORD}
+              - TRANSMISSION_ALT_SPEED_DOWN=70000
+              - TRANSMISSION_ALT_SPEED_TIME_ENABLED=true
+              - TRANSMISSION_ALT_SPEED_UP=2000
+              - TRANSMISSION_MAX_PEERS_GLOBAL=1000
+              - TRANSMISSION_PEER_LIMIT_GLOBAL=1000
+              - TRANSMISSION_PEER_LIMIT_PER_TORRENT=100
+              - TRANSMISSION_RATIO_LIMIT=10
+              - TRANSMISSION_RATIO_LIMIT_ENABLED=true
+              - TZ=${timeZone}
+              - ENABLE_UFW=true
+              - UFW_ALLOW_GW_NET=true
+              - PUID=${puid}
+              - PGID=${pgid}
+            logging:
+              driver: json-file
+              options:
+                max-size: 10m
+            ports:
+              - '9091:9091'
+            image: haugene/transmission-openvpn
+            restart: unless-stopped
+            networks:
+              - default
 
-{
+          jackett:
-  virtualisation.oci-containers.containers = {
+            image: lscr.io/linuxserver/jackett
-    "transmission" = {
+            container_name: jackett
-      image = "haugene/transmission-openvpn";
+            environment:
-      environmentFiles = [ /run/secrets/nordvpn ];
+              - PUID=${puid}
-      environment = {
+              - PGID=${pgid}
-        "LOCAL_NETWORK" = "192.168.0.0/24";
+              - TZ=${timeZone}
-        "OPENVPN_PROVIDER" = "NORDVPN";
+              - AUTO_UPDATE=true #optional
-        "TRANSMISSION_ALT_SPEED_DOWN" = "70000";
+            volumes:
-        "TRANSMISSION_ALT_SPEED_TIME_ENABLED" = "true";
+              - "${dockerDir}/Jackett/config:/config"
-        "TRANSMISSION_ALT_SPEED_UP" = "2000";
+              - "${dockerDir}/Jackett/blackhole:/downloads"
-        "TRANSMISSION_MAX_PEERS_GLOBAL" = "1000";
+            ports:
-        "TRANSMISSION_PEER_LIMIT_GLOBAL" = "1000";
+              - 9117:9117
-        "TRANSMISSION_PEER_LIMIT_PER_TORRENT" = "100";
+            restart: unless-stopped
-        "TRANSMISSION_RATIO_LIMIT" = "10";
+            networks:
-        "TRANSMISSION_RATIO_LIMIT_ENABLED" = "true";
+              - default
-        "TZ" = "DE";
-        "ENABLE_UFW" = "true";
-        "UFW_ALLOW_GW_NET" = "true";
-        "PUID" = "1000";
-        "PGID" = "100";
-      };
-      ports = [ "9091:9091" ];
-      volumes = [ "/home/moritz/Docker/Transmission:/data/" ];
-      extraOptions = [ "--cap-add=NET_ADMIN" ];
-    };
 
-    "jackett" = {
+          radarr:
-      image = "linuxserver/jackett";
+            image: lscr.io/linuxserver/radarr
-      environment = {
+            container_name: radarr
-        "PUID" = "1000";
+            environment:
-        "PGID" = "100";
+              - PUID=${puid}
-        "TZ" = "DE";
+              - PGID=${pgid}
-      };
+              - TZ=${timeZone}
-      volumes = [
+            volumes:
-        "/home/moritz/Docker/Jackett/config:/config"
+              - "${mediaDir}/movies:/movies"
-        "/home/moritz/Docker/Jackett/blackhole:/downloads"
+              - "${dockerDir}/Transmission/completed/movies:/downloads"
-      ];
+              - "${dockerDir}/Radarr:/config"
-      ports = [ "9117:9117" ];
+            ports:
-    };
+              - 7878:7878
+            restart: unless-stopped
+            networks:
+              - default
 
-    "radarr" = {
+          sonarr:
-      image = "linuxserver/radarr";
+            image: lscr.io/linuxserver/sonarr
-      environment = {
+            container_name: sonarr
-        "PUID" = "1000";
+            environment:
-        "PGID" = "100";
+              - PUID=${puid}
-        "TZ" = "DE";
+              - PGID=${pgid}
+              - TZ=${timeZone}
+            volumes:
+              - "${mediaDir}/tv:/tv"
+              - "${dockerDir}/Transmission/completed/tv:/downloads"
+              - "${dockerDir}/Sonarr:/config"
+            ports:
+              - 8989:8989
+            restart: unless-stopped
+            networks:
+              - default
+
+          bazarr:
+            image: lscr.io/linuxserver/bazarr
+            container_name: bazarr
+            environment:
+              - PUID=${puid}
+              - PGID=${pgid}
+              - TZ=${timeZone}
+            volumes:
+              - "${mediaDir}/tv:/tv"
+              - "${mediaDir}/movies:/movies"
+              - "${dockerDir}/Bazarr:/config"
+            ports:
+              - 6767:6767
+            restart: unless-stopped
+            networks:
+              - default
+
+        networks:
+          default:
+            driver: bridge
+      '';
+      "Media/start.sh" = {
+        text = ''
+          #!/usr/bin/env bash
+          sudo docker-compose --env-file /run/secrets/nordvpn --file /home/moritz/Media/compose.yml down
+          sudo docker-compose --env-file /run/secrets/nordvpn --file /home/moritz/Media/compose.yml up -d
+        '';
+        executable = true;
       };
-      volumes = [
-        "/media/media/movies:/movies"
-        "/home/moritz/Docker/Transmission/completed/movies:/downloads"
-        "/home/moritz/Docker/Radarr:/config"
-      ];
-      ports = [ "7878:7878" ];
-    };
-    "sonarr" = {
-      image = "linuxserver/sonarr";
-      environment = {
-        "PUID" = "1000";
-        "PGID" = "100";
-        "TZ" = "DE";
-      };
-      volumes = [
-        "/media/media/tv:/tv"
-        "/home/moritz/Docker/Transmission/completed/tv:/downloads"
-        "/home/moritz/Docker/Sonarr:/config"
-      ];
-      ports = [ "8989:8989" ];
-    };
-    "bazarr" = {
-      image = "linuxserver/bazarr";
-      environment = {
-        "PUID" = "1000";
-        "PGID" = "100";
-        "TZ" = "DE";
-      };
-      volumes = [
-        "/media/media/tv:/tv"
-        "/media/media/movies:/movies"
-        "/home/moritz/Docker/Bazarr:/config"
-      ];
-      ports = [ "6767:6767" ];
     };
   };
+  #   "bazarr" = {
+  #     image = "linuxserver/bazarr";
+  #     environment = {
+  #       "PUID" = "1000";
+  #       "PGID" = "100";
+  #       "TZ" = "DE";
+  #     };
+  #     volumes = [
+  #       "/media/media/tv:/tv"
+  #       "/media/media/movies:/movies"
+  #       "/home/moritz/Docker/Bazarr:/config"
+  #     ];
+  #     ports = [ "6767:6767" ];
+  #     extraOptions = [ "--ip=172.17.0.6" ];
+  #   };
+  # };
 }

modules/services/agenix.nix

@@ -3,7 +3,10 @@
 {
   services.sshd.enable = true;
   age.secrets = {
-    nordvpn.file = ../../secrets/nordvpn.age;
+    nordvpn = {
+      file = ../../secrets/nordvpn.age;
+      owner = "1000";
+    };
     davfs = {
       file = ../../secrets/davfs.age;
       mode = "600";

modules/services/default.nix

@@ -1,7 +1,7 @@
 { config, lib, pkgs, ... }:
 
 {
-  imports = [ ./dunst ./emacs ./agenix.nix ./picom.nix ];
+  imports = [ ./dunst ./emacs ./agenix.nix ./diskstation ./picom.nix ];
 
   home-manager.users.moritz.services = { kdeconnect.enable = true; };