radarr: init

configuration.nix

@@ -34,6 +34,7 @@
 
     ./services/arr/prowlarr.nix
     ./services/arr/sonarr.nix
+    ./services/arr/radarr.nix
 
     ./services/soulseek.nix
 

flake.nix

@@ -127,6 +127,7 @@
           lk_jwt = 8081;
           prowlarr = 9696;
           sonarr = 8989;
+          radarr = 7878;
         };
 
         https = {
@@ -203,6 +204,10 @@
         sonarr = {
           dataDir = services_dir + "/sonarr";
         };
+
+        radarr = {
+          dataDir = services_dir + "/radarr";
+        };
       };
 
       pkgs = import nixpkgs {

services/arr/radarr.nix

@@ -0,0 +1,36 @@
+{
+  pkgs,
+  config,
+  service_configs,
+  lib,
+  ...
+}:
+{
+  imports = [
+    (lib.serviceMountWithZpool "radarr" service_configs.zpool_ssds [
+      service_configs.radarr.dataDir
+    ])
+    (lib.serviceMountWithZpool "radarr" service_configs.zpool_hdds [
+      service_configs.torrents_path
+    ])
+    (lib.serviceFilePerms "radarr" [
+      "Z ${service_configs.radarr.dataDir} 0700 ${config.services.radarr.user} ${config.services.radarr.group}"
+    ])
+  ];
+
+  services.radarr = {
+    enable = true;
+    dataDir = service_configs.radarr.dataDir;
+    settings.server.port = service_configs.ports.radarr;
+    settings.update.mechanism = "external";
+  };
+
+  services.caddy.virtualHosts."radarr.${service_configs.https.domain}".extraConfig = ''
+    import ${config.age.secrets.caddy_auth.path}
+    reverse_proxy :${builtins.toString service_configs.ports.radarr}
+  '';
+
+  users.users.${config.services.radarr.user}.extraGroups = [
+    service_configs.media_group
+  ];
+}