WIP - Freya: MinIO

flake.nix

@@ -219,6 +219,7 @@
 
               ./modules/nixos/users/tiziano.nix
 
+              ./modules/nixos/torrentbox.nix
               ./modules/nixos/nextcloud.nix
               ./modules/nixos/ntfy.nix
             ] ++ homeManagerModules ++ [

instances/freya/configuration.nix

@@ -1,4 +1,4 @@
-{ pkgs, lib, ... }:
+{ pkgs, lib, config, ... }:
 let
   hosts = import ../../hosts.nix;
 in
@@ -84,19 +84,19 @@ in
     # };
 
 
+    minio = {
+      enable = true;
+      dataDir = [
+        # "/var/lib/minio/data"
+        "/mnt/raid/minio/data"
+      ];
+      rootCredentialsFile = config.age.secrets.minio.path;
+    };
+
+
     fail2ban = { enable = true; bantime-increment.enable = true; };
     plex = { enable = true; openFirewall = true; group = "users"; };
     jellyfin = { enable = true; openFirewall = true; group = "users"; };
-    ombi = { enable = true; openFirewall = true; group = "users"; };
-
-    prowlarr = { enable = true; openFirewall = true; };
-    bazarr = { enable = true; openFirewall = true; group = "users"; };
-    lidarr = { enable = true; openFirewall = true; group = "users"; };
-    radarr = { enable = true; openFirewall = true; group = "users"; };
-    readarr = { enable = true; openFirewall = true; group = "users"; };
-    sonarr = { enable = true; openFirewall = true; group = "users"; };
-
-    transmission = { enable = true; openFirewall = true; group = "users"; settings.download-dir = "/mnt/raid/condiviso/Torrent"; };
 
     home-assistant = {
       enable = true;

modules/nixos/torrentbox.nix

@@ -0,0 +1,28 @@
+{
+  services =
+    {
+      ombi = { enable = true; openFirewall = true; group = "users"; };
+
+      bazarr = { enable = true; openFirewall = true; group = "users"; };
+      lidarr = { enable = true; openFirewall = true; group = "users"; };
+      prowlarr = { enable = true; openFirewall = true; };
+      radarr = { enable = true; openFirewall = true; group = "users"; };
+      readarr = { enable = true; openFirewall = true; group = "users"; };
+      sonarr = { enable = true; openFirewall = true; group = "users"; };
+
+      transmission = { enable = true; openFirewall = true; group = "users"; settings.download-dir = "/mnt/raid/condiviso/Torrent"; };
+    };
+
+  systemd.services = {
+    ombi.serviceConfig = { MemoryHigh = "400M"; MemoryMax = "800M"; };
+
+    bazarr.serviceConfig = { MemoryHigh = "400M"; MemoryMax = "800M"; };
+    lidarr.serviceConfig = { MemoryHigh = "400M"; MemoryMax = "800M"; };
+    prowlarr.serviceConfig = { MemoryHigh = "400M"; MemoryMax = "800M"; };
+    radarr.serviceConfig = { MemoryHigh = "400M"; MemoryMax = "800M"; };
+    readarr.serviceConfig = { MemoryHigh = "400M"; MemoryMax = "800M"; };
+    sonarr.serviceConfig = { MemoryHigh = "400M"; MemoryMax = "800M"; };
+
+    transmission.serviceConfig = { MemoryHigh = "400M"; MemoryMax = "800M"; };
+  };
+}

secrets/minio.age

@@ -0,0 +1,18 @@
+age-encryption.org/v1
+-> ssh-ed25519 hGQASA vacDVhPM0TXegMurC60WAFbkHbvJHYM/AsWoubH+Wx4
+MmRy5dlnXeSecWpebMkOBlONDCZ18OK6Q3aOP36xB1U
+-> ssh-ed25519 4behFA I2MAIPLl5pumnmClkHsNnPrvPvtcMHVzW3YjRDeqMio
+r9BFiX+aQ6F72Mj/MDMt45pAAKwpB5PSeq0qGWRFXxs
+-> ssh-ed25519 IvyYug krsjkv5Z8qDweE2ddr0+J0sEeiGBKwUy6PaY+v/XpHs
+NWpRTRJ9Y7pCNtx41PEGcdPbCPH5IKGgDclwpo1Ma/E
+-> ssh-ed25519 v7O/FA weGdkjFwjHqg/bCeh/ez9fiwI4sheRlV+S8bVyR/T3E
+CZ1vs/wgntqBSbYRUN4lLMXoeHlio7C98+afgos+mzk
+-> ssh-ed25519 XSnoeQ RCV89qRpn9paHr6ui7ekvlsDwx0z/X/cHnjvSP0zT1I
+Nrp80eEajS1LbXhifvLrJZXhwPInqGcjuYl6m9IivZE
+-> ssh-ed25519 XgC3XA pgG28v3PKzI1n/MW9J0+FhrONRX40s/+PAmQObO4jkM
+Mif2gd3Mu7HjxuHFmCoFWp6GMlpleB7B16nPaNK/tRE
+-> ssh-ed25519 l795CA KkNAULru5Q25xDmGJ05YkmD59aulcdee8k0RTqvfUHA
+3UQ52N/EyAGc+MAjTgziqs69CgqcEBaOnyDhw3ToaYA
+--- NTrVSeB9yXDPKc7TFzm8Pl8QxhS9vcnrWRsz2o/qeY0
+W–hNy8ÒøGw7³-TbßÝ°ZÝbQÇ	®X^^ÞÞ»AWæEâ`sQ\ÇM­îiµÎ=FÙ35¦NÞ§GÎR‰h™—‹¥Àë%j*€O»ÔÙf'«‡Q>
+´(
NÇ]fþc¹¼Ï<UÖ^îÿEXƒjT5ž3

secrets/secrets.nix

@@ -25,6 +25,7 @@ in
   "garage_tiziano_loki_key.age".publicKeys = devUsers ++ [ loki ];
   "kavita_token.age".publicKeys = devUsers ++ [ loki ];
   "nextcloud_admin_secret.age".publicKeys = devUsers ++ [ freya ];
+  "minio.age".publicKeys = devUsers ++ systems;
   "ntfy-odin.age".publicKeys = devUsers ++ [ odin ];
   "ntfy-loki.age".publicKeys = devUsers ++ [ loki ];
   "ntfy-freya.age".publicKeys = devUsers ++ [ freya ];