From ddfa1e3a31bab3d1c84ce74aa1965fcab0a8b43d Mon Sep 17 00:00:00 2001
From: Simon Gardling <titaniumtown@proton.me>
Date: Thu, 19 Feb 2026 18:27:10 -0500
Subject: [PATCH] jellyseerr: init

---
 configuration.nix           |  5 +++++
 flake.nix                   |  5 +++++
 services/arr/jellyseerr.nix | 43 +++++++++++++++++++++++++++++++++++++
 3 files changed, 53 insertions(+)
 create mode 100644 services/arr/jellyseerr.nix

diff --git a/configuration.nix b/configuration.nix
index 39f5c30..fdb8cc1 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -37,18 +37,23 @@
     ./services/arr/sonarr.nix
     ./services/arr/radarr.nix
     ./services/arr/bazarr.nix
+    ./services/arr/jellyseerr.nix
 
     ./services/arr/prowlarr.nix
     ./services/arr/sonarr.nix
     ./services/arr/radarr.nix
     ./services/arr/bazarr.nix
+    ./services/arr/jellyseerr.nix
     ./services/arr/sonarr.nix
     ./services/arr/radarr.nix
     ./services/arr/bazarr.nix
+    ./services/arr/jellyseerr.nix
     ./services/arr/radarr.nix
     ./services/arr/bazarr.nix
+    ./services/arr/jellyseerr.nix
     ./services/arr/bazarr.nix
     ./services/arr/jellyseerr.nix
+    ./services/arr/jellyseerr.nix
     ./services/arr/recyclarr.nix
     ./services/arr/init.nix
 
diff --git a/flake.nix b/flake.nix
index d1ffa1d..1162c13 100644
--- a/flake.nix
+++ b/flake.nix
@@ -129,6 +129,7 @@
           sonarr = 8989;
           radarr = 7878;
           bazarr = 6767;
+          jellyseerr = 5055;
         };
 
         https = {
@@ -212,6 +213,10 @@
         bazarr = {
           dataDir = services_dir + "/bazarr";
         };
+
+        jellyseerr = {
+          configDir = services_dir + "/jellyseerr";
+        };
         };
       };
 
diff --git a/services/arr/jellyseerr.nix b/services/arr/jellyseerr.nix
new file mode 100644
index 0000000..6433d04
--- /dev/null
+++ b/services/arr/jellyseerr.nix
@@ -0,0 +1,43 @@
+{
+  pkgs,
+  config,
+  service_configs,
+  lib,
+  ...
+}:
+{
+  imports = [
+    (lib.serviceMountWithZpool "jellyseerr" service_configs.zpool_ssds [
+      service_configs.jellyseerr.configDir
+    ])
+    (lib.serviceFilePerms "jellyseerr" [
+      "Z ${service_configs.jellyseerr.configDir} 0700 jellyseerr jellyseerr"
+    ])
+  ];
+
+  services.jellyseerr = {
+    enable = true;
+    port = service_configs.ports.jellyseerr;
+    configDir = service_configs.jellyseerr.configDir;
+  };
+
+  systemd.services.jellyseerr.serviceConfig = {
+    DynamicUser = lib.mkForce false;
+    User = "jellyseerr";
+    Group = "jellyseerr";
+    ReadWritePaths = [ service_configs.jellyseerr.configDir ];
+  };
+
+  users.users.jellyseerr = {
+    isSystemUser = true;
+    group = "jellyseerr";
+    home = service_configs.jellyseerr.configDir;
+  };
+
+  users.groups.jellyseerr = { };
+
+  services.caddy.virtualHosts."jellyseerr.${service_configs.https.domain}".extraConfig = ''
+    # import ${config.age.secrets.caddy_auth.path}
+    reverse_proxy :${builtins.toString service_configs.ports.jellyseerr}
+  '';
+}