From a040dd330dbab01cb17c0fb72c2d89f9a534965e Mon Sep 17 00:00:00 2001
From: Filippo Berto <filippo.berto@cern.ch>
Date: Wed, 17 Dec 2025 14:54:08 +0100
Subject: [PATCH] update(torrentbox): expose transmission in tailscale

---
 nixos/torrentbox.nix | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/nixos/torrentbox.nix b/nixos/torrentbox.nix
index e7137aa..1338606 100644
--- a/nixos/torrentbox.nix
+++ b/nixos/torrentbox.nix
@@ -1,4 +1,8 @@
-{ pkgs, ... }: {
+{ pkgs, lib, ... }:
+let
+  hosts = import ../hosts.nix;
+in
+{
   services = {
     bazarr = { enable = true; openFirewall = true; group = "users"; };
     # jellyseerr = { enable = true; openFirewall = true; };
@@ -19,6 +23,10 @@
         download-queue-size = 20;
         ratio-limit = 3;
         ratio-limit-enabled = true;
+        blocklist-enabled = true;
+        rpc-bind-address = hosts.tailscale.ipv4.heimdall;
+        rpc-host-whitelist = lib.strings.join "," [ "heimdall" ];
+        rpc-whitelist = lib.strings.join "," [ "127.0.0.1" "::1" hosts.tailscale.ipv4.heimdall hosts.tailscale.ipv4.sif hosts.tailscale.ipv4.thor ];
       };
     };
   };