From dd9042ae95b1fb89aec27300172aa282a5ffdb6b Mon Sep 17 00:00:00 2001
From: Simon Gardling <titaniumtown@proton.me>
Date: Thu, 20 Nov 2025 00:52:26 -0500
Subject: [PATCH] add monero service

---
 configuration.nix   |  2 ++
 flake.nix           |  4 ++++
 services/monero.nix | 25 +++++++++++++++++++++++++
 3 files changed, 31 insertions(+)
 create mode 100644 services/monero.nix

diff --git a/configuration.nix b/configuration.nix
index e46c4e8..426bc42 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -39,6 +39,8 @@
 
     ./services/bitwarden.nix
 
+    ./services/monero.nix
+
     # KEEP UNTIL 2028
     ./services/caddy_senior_project.nix
   ];
diff --git a/flake.nix b/flake.nix
index 246fb1d..e2546c6 100644
--- a/flake.nix
+++ b/flake.nix
@@ -155,6 +155,10 @@
         vaultwarden = {
           path = "/var/lib/vaultwarden";
         };
+
+        monero = {
+          dataDir = "/services/monero";
+        };
       };
 
       pkgs = import nixpkgs {
diff --git a/services/monero.nix b/services/monero.nix
new file mode 100644
index 0000000..cbc2c7b
--- /dev/null
+++ b/services/monero.nix
@@ -0,0 +1,25 @@
+{
+  service_configs,
+  lib,
+  ...
+}:
+{
+  imports = [
+    (lib.serviceMountDeps "monero" [
+      service_configs.monero.dataDir
+    ])
+    (lib.serviceDependZpool "monero" service_configs.zpool_hdds)
+  ];
+
+  services.monero = {
+    enable = true;
+    dataDir = service_configs.monero.dataDir;
+    rpc = {
+      restricted = true;
+    };
+  };
+
+  systemd.tmpfiles.rules = [
+    "Z ${service_configs.monero.dataDir} 0700 monero monero"
+  ];
+}